hanoman 0.1.26 → 0.1.28

package/dist/server.js

@@ -4256,6 +4256,130 @@ var init_spec_source = __esm({
   }
 });
 
+// ../shared/src/method-catalog.ts
+function resolveMethod(id) {
+  return (id ? METHODS[id] : void 0) ?? METHODS[DEFAULT_METHOD];
+}
+function readSpecMethod(payload) {
+  if (!payload || typeof payload !== "object" || Array.isArray(payload)) return null;
+  const m = payload.method;
+  return typeof m === "string" && m.trim() !== "" ? m.trim() : null;
+}
+function stampSpecMethod(payload, methodId) {
+  if (payload === null || payload === void 0) return { method: methodId };
+  if (typeof payload !== "object" || Array.isArray(payload)) return null;
+  return { ...payload, method: methodId };
+}
+var DEFAULT_METHOD, VERIFICATION_GATE, MATT_CLAUSE, METHODS, METHOD_IDS, uniq, PLAN_DIRS, SPEC_DIRS;
+var init_method_catalog = __esm({
+  "../shared/src/method-catalog.ts"() {
+    "use strict";
+    DEFAULT_METHOD = "superpowers";
+    VERIFICATION_GATE = "superpowers:verification-before-completion";
+    MATT_CLAUSE = "Sesi ini TAK BERPENUNGGU \u2014 tak ada manusia yang menonton terminal untuk menjawab. Skill mattpocock yang kontraknya mewawancarai manusia (`/grill-me`, `/to-spec`, `/triage`) JANGAN dipakai: pakai primitif model-invoked-nya dan putuskan sendiri. `to-tickets` di fase Plan dipakai HANYA sebagai penghasil berkas plan berkotak `- [ ]` di `docs/matt/plans/`, BUKAN penerbit tiket \u2014 hanoman sendiri adalah issue tracker-nya, jadi jangan menulis ke tracker eksternal mana pun.";
+    METHODS = {
+      // Isi `PHASE_SKILLS` (SPEC-166) dipindah APA ADANYA. Objective & Spec adalah keluaran skill
+      // brainstorming yang di-invoke di fase Brainstorm — sengaja tak punya entri sendiri. Fase reverse
+      // dipandu standar docs di prompt-nya, bukan skill.
+      superpowers: {
+        id: "superpowers",
+        label: "superpowers",
+        planDir: "docs/superpowers/plans",
+        specDir: "docs/superpowers/specs",
+        phaseSkills: {
+          Brainstorm: ["superpowers:brainstorming"],
+          Audit: ["superpowers:systematic-debugging"],
+          Plan: ["superpowers:writing-plans"],
+          Execute: [
+            "superpowers:executing-plans",
+            "superpowers:test-driven-development",
+            VERIFICATION_GATE
+          ],
+          // SPEC-407 · fase `Goal` sengaja TANPA skill: seluruh inti flow itu membebaskan sesi dari
+          // proses kaku. Yang tetap dijaga cuma pintu keluarnya.
+          Verifikasi: [VERIFICATION_GATE]
+        },
+        exitSkills: [VERIFICATION_GATE],
+        requires: ["superpowers"],
+        install: {
+          claude: [
+            "claude plugin marketplace add obra/superpowers-marketplace",
+            "claude plugin install superpowers@superpowers-marketplace"
+          ],
+          codex: ["codex plugin add superpowers@openai-curated"]
+        }
+      },
+      // Plugin `mattpocock-skills` (`/plugin install mattpocock-skills`); skill plugin di Claude Code
+      // beralamat `plugin:skill`. `superpowers` tetap ikut di `requires` karena gerbang verifikasinya
+      // dipinjam dari sana — mattpocock tak punya padanannya.
+      matt: {
+        id: "matt",
+        label: "mattpocock",
+        planDir: "docs/matt/plans",
+        specDir: "docs/matt/specs",
+        phaseSkills: {
+          Brainstorm: ["mattpocock-skills:grilling"],
+          Audit: ["mattpocock-skills:diagnosing-bugs"],
+          Plan: ["mattpocock-skills:to-tickets"],
+          Execute: [
+            "mattpocock-skills:implement",
+            "mattpocock-skills:tdd",
+            "mattpocock-skills:code-review"
+          ],
+          Verifikasi: [VERIFICATION_GATE]
+        },
+        exitSkills: [VERIFICATION_GATE],
+        extraClause: MATT_CLAUSE,
+        requires: ["mattpocock-skills", "superpowers"],
+        // `mattpocock-skills` ada di marketplace resmi Claude Code → tanpa `marketplace add`.
+        // superpowers ikut dipasang karena `requires` menyebutnya: gerbang verifikasinya dipinjam
+        // dari sana (INVARIAN 2). codex belum punya plugin native mattpocock — jalur resminya
+        // `npx skills`, dan ia INTERAKTIF; itu justru alasan pemasangan hidup di pane yang ditonton.
+        install: {
+          claude: [
+            "claude plugin install mattpocock-skills",
+            "claude plugin marketplace add obra/superpowers-marketplace",
+            "claude plugin install superpowers@superpowers-marketplace"
+          ],
+          codex: [
+            "npx skills@latest add mattpocock/skills",
+            "codex plugin add superpowers@openai-curated"
+          ]
+        }
+      }
+    };
+    METHOD_IDS = Object.keys(METHODS);
+    uniq = (xs) => [...new Set(xs)];
+    PLAN_DIRS = uniq(METHOD_IDS.map((id) => METHODS[id].planDir));
+    SPEC_DIRS = uniq(METHOD_IDS.map((id) => METHODS[id].specDir));
+  }
+});
+
+// ../shared/src/method-status.ts
+function methodSkills(m) {
+  return [.../* @__PURE__ */ new Set([...Object.values(m.phaseSkills).flat(), ...m.exitSkills])];
+}
+function methodStatus(m, agent, installed) {
+  const haveSkills = new Set(installed.skills);
+  const havePackages = new Set(installed.packages);
+  const missingPackages = m.requires.filter((p) => !havePackages.has(p));
+  const missingSkills = methodSkills(m).filter((id) => !haveSkills.has(id));
+  return {
+    method: m.id,
+    label: m.label,
+    agent,
+    ready: missingPackages.length === 0 && missingSkills.length === 0,
+    missingPackages,
+    missingSkills,
+    install: [...m.install[agent]]
+  };
+}
+var init_method_status = __esm({
+  "../shared/src/method-status.ts"() {
+    "use strict";
+  }
+});
+
 // ../shared/src/agent-engine.ts
 var zAgentEngine;
 var init_agent_engine = __esm({
@@ -4442,6 +4566,7 @@ var init_entities = __esm({
     init_telegram();
     init_agent_engine();
     init_auto_merge();
+    init_method_catalog();
     zProject = external_exports.object({
       id: external_exports.string(),
       name: external_exports.string(),
@@ -4662,6 +4787,12 @@ var init_entities = __esm({
       // SPEC-338 · ADR-0074 · model/effort codex
       verifyScope: zVerifyScope.default("changed"),
       // SPEC-376 · ADR-0080 · scope verifikasi sesi
+      // SPEC-734 · ADR-0113 · metode workflow default. LENIENT (`z.string()`, bukan `z.enum`):
+      // instance yang di-sync dari hub bisa membawa id metode yang belum ada di build ini, dan itu
+      // harus jadi fallback diam di titik pakai (`resolveMethod`) — bukan baris Setting yang gagal
+      // parse lalu mengosongkan layar Settings. Alasan yang sama dengan model/effort di sini.
+      method: external_exports.string().default(DEFAULT_METHOD),
+      // SPEC-734 · ADR-0113 · metode workflow default
       conflict: zConflict.default(CONFLICT_DEFAULTS),
       // SPEC-383 · ADR-0081 · default sesi konflik rebase/merge
       lead: zLead.default(LEAD_DEFAULTS),
@@ -5651,7 +5782,15 @@ var init_dto = __esm({
       // SPEC-236 · terminal biasa NON-claude: shell mentah di repoDir project. Tanpa flow (bukan
       // pipeline claude). DIDAHULUKAN: z.object non-strict membuang key asing, jadi bila varian
       // longgar {project,flow?} lebih dulu, {project,shell:true} akan lolos sbg plain (shell dibuang).
-      external_exports.object({ project: external_exports.string(), shell: external_exports.literal(true) }),
+      // SPEC-739 · ADR-0114 · pemasangan skill metode: klien mengirim METODE + AGEN, bukan teks
+      // perintah — perintahnya diturunkan server dari katalog `METHODS`. Dengan begitu "perintah
+      // instalasi adalah data katalog" berlaku ujung ke ujung, dan endpoint ini tak pernah menjadi
+      // "jalankan shell arbitrer". Tanpa field ini, shell mentah persis seperti SPEC-236.
+      external_exports.object({
+        project: external_exports.string(),
+        shell: external_exports.literal(true),
+        install: external_exports.object({ method: external_exports.string(), agent: zAgent }).optional()
+      }),
       // SPEC-166 · "reverse" = sesi project-level di worktree-nya sendiri, menyusun Source of Truth
       // dari kode. TANPA override runtime: sesi project-level mengikuti Setting.agent (ADR-0074).
       // Terminal biasa (tanpa flow) kini punya variannya SENDIRI di bawah — lihat SPEC-517.
@@ -5698,6 +5837,10 @@ var init_dto = __esm({
         goalCondition: external_exports.string().max(4e3).optional(),
         agent: zAgent.optional(),
         verifyScope: zVerifyScope.optional(),
+        // SPEC-734 · ADR-0113 — metode workflow per SESI: undefined → Spec.payload.method →
+        // Setting.method → "superpowers". LENIENT (`z.string()`, bukan `z.enum`): id yang tak dikenal
+        // jatuh ke default di `resolveMethod`, bukan ditolak 400 — alasan yang sama dengan zSetting.
+        method: external_exports.string().optional(),
         // SPEC-447 · ADR-0093 — lewati gerbang dependency. Hanya jalur manusia; UI hanya
         // mengirimkannya sesudah operator melihat daftar pemblokirnya.
         force: external_exports.boolean().optional()
@@ -5891,6 +6034,8 @@ var init_api = __esm({
       limits: `${API}/limits`,
       // SPEC-339 · versi codex CLI (peringatan lunak model GPT-5.6).
       codexVersion: `${API}/codex/version`,
+      // SPEC-739 · ADR-0114 · kesiapan skill metode per agen. LOCAL-only, diturunkan live dari disk.
+      methodStatus: `${API}/methods/status`,
       // SPEC-489 · panduan AI agent — markdown MENTAH & PUBLIC (tanpa auth). Satu definisi URL untuk
       // klien web dan untuk tautan yang disalin operator ke agennya.
       agentDoc: `${API}/agent-integration.md`,
@@ -7557,6 +7702,8 @@ var init_src = __esm({
     "use strict";
     init_enums();
     init_spec_source();
+    init_method_catalog();
+    init_method_status();
     init_agent_engine();
     init_entities();
     init_agent();
@@ -7811,54 +7958,60 @@ var init_goal_spec = __esm({
 });
 
 // ../runner/src/prompt.ts
-function startPrompt(flow, spec, branchTo, autonomy, verifyScope) {
+function startPrompt(flow, spec, branchTo, autonomy, verifyScope, method) {
+  const m = resolveMethod(method);
   const detail = spec.payload ? `
 Detail: ${JSON.stringify(spec.payload)}` : "";
   return [
     `hanoman ${flow}. Ikuti internal/docs sebagai Source of Truth; perbarui docs yang tersentuh dan link-nya di index, dalam commit yang sama.`,
-    phaseInstruction(PIPELINES[flow]),
+    phaseInstruction(PIPELINES[flow], m),
     auditDecisionInstruction(flow),
     auditContinuationInstruction(flow, spec),
     auditOnlyInstruction(flow),
     autonomyClause(autonomy),
     scopeClause(flow, verifyScope),
     codeStyleClause(flow),
-    skillInstruction(PIPELINES[flow]),
+    methodClause(m),
+    skillInstruction(PIPELINES[flow], m, writesCode(flow)),
     `Setelah fase terakhir: commit, lalu \`git push origin HEAD:refs/heads/${branchTo}\`. Worktree ini detached HEAD \u2014 itu memang disengaja.`,
     `Backlog item ${spec.id} \xB7 sumber ${spec.source} \xB7 prioritas ${spec.priority}
 Judul: ${spec.title}
 Objective: ${spec.objective}${detail}`
   ].filter(Boolean).join("\n\n");
 }
-function continuePrompt(flow, spec, branchTo, autonomy, verifyScope) {
+function continuePrompt(flow, spec, branchTo, autonomy, verifyScope, method) {
+  const m = resolveMethod(method);
   const detail = spec.payload ? `
 Detail: ${JSON.stringify(spec.payload)}` : "";
   return [
     `hanoman ${flow} \u2014 MELANJUTKAN backlog item yang sebelumnya ditandai selesai padahal pekerjaannya belum tuntas. Ikuti internal/docs sebagai Source of Truth; perbarui docs yang tersentuh dan link-nya di index, dalam commit yang sama.`,
-    `JANGAN mengulang fase awal \u2014 spec & plan sudah ada. Lanjut di fase Execute: baca plan di docs/superpowers/plans/** untuk backlog item ini, periksa task yang sudah \`[x]\` dan selesaikan yang masih \`[ ]\`. Verifikasi nyata sebelum klaim selesai.`,
+    `JANGAN mengulang fase awal \u2014 spec & plan sudah ada. Lanjut di fase Execute: baca plan di ${m.planDir}/** untuk backlog item ini, periksa task yang sudah \`[x]\` dan selesaikan yang masih \`[ ]\`. Verifikasi nyata sebelum klaim selesai.`,
     autonomyClause(autonomy),
     scopeClause(flow, verifyScope),
     codeStyleClause(flow),
-    skillInstruction(["Execute"]),
+    methodClause(m),
+    skillInstruction(["Execute"], m, writesCode(flow)),
     `Setelah selesai: commit, lalu \`git push origin HEAD:refs/heads/${branchTo}\`. Worktree ini detached HEAD \u2014 itu memang disengaja.`,
     `Backlog item ${spec.id} \xB7 sumber ${spec.source} \xB7 prioritas ${spec.priority}
 Judul: ${spec.title}
 Objective: ${spec.objective}${detail}`
   ].filter(Boolean).join("\n\n");
 }
-function resumePrompt(flow, spec, branchTo, resume, autonomy, verifyScope) {
+function resumePrompt(flow, spec, branchTo, resume, autonomy, verifyScope, method) {
+  const m = resolveMethod(method);
   const detail = spec.payload ? `
 Detail: ${JSON.stringify(spec.payload)}` : "";
   const auditDecided = resume.recorded.some((line) => line.startsWith("Audit "));
   return [
     `hanoman ${flow} \u2014 MELANJUTKAN sesi backlog yang sudah berjalan. Ikuti internal/docs sebagai Source of Truth; perbarui docs yang tersentuh dan link-nya di index, dalam commit yang sama.`,
-    resumeClause(resume, branchTo, PIPELINES[flow].includes("Plan")),
-    phaseInstruction(PIPELINES[flow]),
+    resumeClause(resume, branchTo, m.planDir, PIPELINES[flow].includes("Plan")),
+    phaseInstruction(PIPELINES[flow], m),
     auditDecided ? "" : auditDecisionInstruction(flow),
     autonomyClause(autonomy),
     scopeClause(flow, verifyScope),
     codeStyleClause(flow),
-    skillInstruction(PIPELINES[flow]),
+    methodClause(m),
+    skillInstruction(PIPELINES[flow], m, writesCode(flow)),
     `Setelah fase terakhir: commit, lalu \`git push origin HEAD:refs/heads/${branchTo}\`. Worktree ini detached HEAD \u2014 itu memang disengaja.`,
     `Backlog item ${spec.id} \xB7 sumber ${spec.source} \xB7 prioritas ${spec.priority}
 Judul: ${spec.title}
@@ -7866,6 +8019,7 @@ Objective: ${spec.objective}${detail}`
   ].filter(Boolean).join("\n\n");
 }
 function startGoalPrompt(spec, branchTo, opts = {}) {
+  const m = resolveMethod(opts.method);
   const g = readGoalPayload(spec.payload);
   const detail = [
     `Goal: ${g?.goal ?? spec.objective}`,
@@ -7874,14 +8028,15 @@ function startGoalPrompt(spec, branchTo, opts = {}) {
   ].filter(Boolean).join("\n");
   return [
     "hanoman goal \u2014 sesi ini mengejar SATU goal sampai tercapai. TIDAK ada fase Brainstorm, Objective, Spec, maupun Plan: jangan menulis design doc, jangan menulis plan berkotak, jangan memecah pekerjaan ini jadi backlog baru. Langsung kerjakan goal-nya. Tetap ikuti internal/docs sebagai Source of Truth; perbarui docs yang tersentuh dan link-nya di index, dalam commit yang sama.",
-    opts.resume ? resumeClause(opts.resume, branchTo, false) : "",
+    opts.resume ? resumeClause(opts.resume, branchTo, m.planDir, false) : "",
     detail,
-    phaseInstruction(PIPELINES.goal),
+    phaseInstruction(PIPELINES.goal, m),
     "Fase Verifikasi bukan formalitas: jalankan perintah yang membuktikan goal-nya tercapai (test/typecheck/benchmark/perintah yang relevan) dan baca outputnya. Klaim tanpa output bukan bukti.",
     autonomyClause(opts.autonomy),
     scopeClause("goal", opts.verifyScope),
     codeStyleClause("goal"),
-    skillInstruction(PIPELINES.goal),
+    methodClause(m),
+    skillInstruction(PIPELINES.goal, m, writesCode("goal")),
     `Setelah fase terakhir: commit, lalu \`git push origin HEAD:refs/heads/${branchTo}\`. Worktree ini detached HEAD \u2014 itu memang disengaja.`,
     `Backlog item ${spec.id} \xB7 sumber ${spec.source} \xB7 prioritas ${spec.priority}
 Judul: ${spec.title}`
@@ -7890,7 +8045,7 @@ Judul: ${spec.title}`
 function startProjectPrompt(flow, project, branchTo) {
   return [
     `hanoman ${flow}. Susun Source of Truth repo ini dari kodenya di internal/docs/**, mengikuti STANDAR DOCS di bagian bawah prompt ini.`,
-    phaseInstruction(PIPELINES[flow]),
+    phaseInstruction(PIPELINES[flow], PROJECT_METHOD),
     REVERSE_PHASE_GUIDE,
     `Setiap fase selesai: commit hasilnya, lalu \`git push origin HEAD:refs/heads/${branchTo}\` \u2014 push per fase, supaya pekerjaan tak hilang bila worktree lenyap. Bila remote origin tidak ada, lewati push dan catat itu di laporan akhir \u2014 jangan gagal diam-diam. Worktree ini detached HEAD \u2014 memang disengaja. Manusia yang me-review dan merge branch ${branchTo}.`,
     `Project ${project.id} \xB7 ${project.name}
@@ -7908,10 +8063,10 @@ PRD ini adalah TINDAK LANJUT audit di bawah. Pakai temuannya sebagai bahan brain
 ${audit.content}` : "";
   return [
     `hanoman prd. Kamu memandu PM/PO menyusun SATU dokumen PRD untuk project ini dari brief + brainstorm. Keluaranmu HANYA dokumen PRD \u2014 JANGAN menulis kode fitur.`,
-    phaseInstruction(PIPELINES.prd),
+    phaseInstruction(PIPELINES.prd, PROJECT_METHOD),
     `- Brainstorm: pandu PM secara interaktif. Ajukan SATU pertanyaan per giliran ke manusia di terminal ini, tunggu jawabannya, perdalam brief sampai jelas (masalah, pengguna, scope, metrik sukses). Jangan mengarang; topik yang PM belum jawab tandai sebagai open question.`,
     `- PRD: tulis dokumen ke \`docs/prd/${slug}.md\`. Awali dengan heading \`# <judul PRD>\`, lalu bagian: Ringkasan \xB7 Masalah & konteks \xB7 Persona/pengguna \xB7 Goals & non-goals \xB7 Scope (in/out) \xB7 User stories \xB7 Acceptance criteria (gaya EARS) \xB7 Metrik sukses \xB7 Open questions. Isi lengkap dan spesifik dari hasil brainstorm, bukan kerangka kosong.`,
-    skillInstruction(PIPELINES.prd),
+    skillInstruction(PIPELINES.prd, PROJECT_METHOD, false),
     `Setelah PRD ditulis: commit, lalu \`git push origin HEAD:refs/heads/${branchTo}\`. Bila remote origin tidak ada, lewati push dan catat itu di terminal \u2014 jangan gagal diam-diam. Worktree ini detached HEAD \u2014 memang disengaja. Manusia yang me-review lalu merge branch ${branchTo}.`,
     `Project ${project.id} \xB7 ${project.name}
 Brief \u2014 Judul: ${brief.title}
@@ -7925,7 +8080,7 @@ function startBreakdownPrompt(project, prd, branchTo) {
   const slug = branchTo.slice(branchTo.lastIndexOf("/") + 1);
   return [
     `hanoman breakdown. Kamu memecah SATU PRD kompleks menjadi BEBERAPA backlog kecil yang bisa dikerjakan PARALEL tanpa saling bergantung. Keluaranmu HANYA dokumen manifest \u2014 JANGAN menulis kode fitur.`,
-    phaseInstruction(PIPELINES.breakdown),
+    phaseInstruction(PIPELINES.breakdown, PROJECT_METHOD),
     `- Analisis: baca PRD (di bawah) sampai paham SELURUH scope in-PRD. Petakan pekerjaan menjadi unit-unit yang: (a) kecil & terukur \u2014 tiap unit tuntas dalam satu sesi; (b) non-overlapping \u2014 cakupan tak tumpang tindih; (c) TANPA cross-dependency \u2014 urutan bebas, bisa jalan bersamaan; (d) gabungannya MENUTUP seluruh scope PRD. Bila dua unit terpaksa berurutan, gabung jadi satu.`,
     `- Breakdown: tulis manifest ke \`docs/prd/${slug}.breakdown.md\`. Awali heading \`# Breakdown: ${prd.title}\`, lalu prosa: ringkasan + untuk TIAP backlog satu paragraf (judul, cakupan, dan SATU kalimat kenapa aman-paralel / tak bergantung yang lain). Di AKHIR dokumen sertakan TEPAT SATU blok kode berpagar json berisi kontrak mesin PERSIS bentuk ini (tanpa komentar, priority \u2208 tinggi|sedang|rendah):
 \`\`\`json
@@ -7942,10 +8097,10 @@ ${prd.content}`
 function startScaffoldPrompt(project, branchTo) {
   return [
     `hanoman scaffold. Susun Source of Truth LENGKAP untuk project from-scratch ini di internal/docs/** DARI IDE-nya, mengikuti STANDAR DOCS di bagian bawah prompt ini. Belum ada kode \u2014 docs dulu.`,
-    phaseInstruction(PIPELINES.scaffold),
+    phaseInstruction(PIPELINES.scaffold, PROJECT_METHOD),
     SCAFFOLD_PHASE_GUIDE,
     `Setiap fase selesai: commit hasilnya, lalu \`git push origin HEAD:refs/heads/${branchTo}\` \u2014 push per fase, supaya pekerjaan tak hilang bila worktree lenyap. Bila remote origin tidak ada, lewati push dan catat itu di laporan akhir \u2014 jangan gagal diam-diam. Worktree ini detached HEAD \u2014 memang disengaja. Manusia yang me-review dan merge branch ${branchTo}.`,
-    skillInstruction(PIPELINES.scaffold),
+    skillInstruction(PIPELINES.scaffold, PROJECT_METHOD, false),
     `Project ${project.id} \xB7 ${project.name}
 Ide awal: ${project.desc || "\u2014"}
 Stack: ${project.stack || "\u2014"}`,
@@ -7967,10 +8122,11 @@ Stack: ${project.stack || "\u2014"}`,
 ${cron.prompt}`
   ].join("\n\n");
 }
-var PIPELINES, AUTONOMY_CLAUSE, AUTONOMY_CLAUSE_FULL, autonomyClause, phaseInstruction, PHASE_SKILLS, skillInstruction, auditDecisionInstruction, ESCALATION_CONTRACT, auditOnlyInstruction, auditContinuationInstruction, writesCode, scopeClause, codeStyleClause, resumeClause, RESUMED_WORKTREE_NOTE, REVERSE_PHASE_GUIDE, SCAFFOLD_PHASE_GUIDE;
+var PIPELINES, AUTONOMY_CLAUSE, AUTONOMY_CLAUSE_FULL, autonomyClause, phaseInstruction, skillInstruction, auditDecisionInstruction, ESCALATION_CONTRACT, auditOnlyInstruction, auditContinuationInstruction, writesCode, scopeClause, codeStyleClause, methodClause, PROJECT_METHOD, resumeClause, RESUMED_WORKTREE_NOTE, REVERSE_PHASE_GUIDE, SCAFFOLD_PHASE_GUIDE;
 var init_prompt = __esm({
   "../runner/src/prompt.ts"() {
     "use strict";
+    init_src();
     init_reverse_standard();
     init_verify_scope();
     init_code_style();
@@ -7993,29 +8149,21 @@ var init_prompt = __esm({
     AUTONOMY_CLAUSE = 'Jalankan seluruh pipeline sampai tuntas tanpa berhenti di batas antar-fase. Checkpoint "review"/"approval"/"need review" milik skill superpowers BUKAN titik berhenti di sini \u2014 lanjut saja ke fase berikutnya. Berhenti HANYA saat butuh keputusan manusia sejati (percabangan yang mengubah bentuk kerja: data model, kontrak API, scope); saat itu tanyakan di terminal ini dan tunggu jawabannya. Selain itu, terus lanjut.';
     AUTONOMY_CLAUSE_FULL = "Kamu berjalan TANPA pengawas \u2014 tak ada manusia yang menonton terminal ini untuk menjawab. Putuskan sendiri di SETIAP percabangan (termasuk yang mengubah bentuk kerja: data model, kontrak API, scope) berdasarkan Source of Truth dan penilaian terbaikmu; JANGAN berhenti bertanya. Tembus seluruh pipeline sampai stage `done`, lalu commit & push. Jangan menunggu review/persetujuan siapa pun \u2014 catat asumsi & keputusan penting di pesan commit agar bisa di-review pasca-fakta. Merge ke branch utama tetap dilakukan manusia, bukan kamu.";
     autonomyClause = (mode) => mode === "full-control" ? AUTONOMY_CLAUSE_FULL : AUTONOMY_CLAUSE;
-    phaseInstruction = (phases) => {
+    phaseInstruction = (phases, method) => {
       const base2 = `Kerjakan fase berurutan: ${phases.join(" \u2192 ")}.
 Setiap kali sebuah fase selesai (atau kamu putuskan dilewati), append satu baris ke berkas di $HANOMAN_PHASE_FILE \u2014 persis: \`echo "<Nama Fase> done" >> "$HANOMAN_PHASE_FILE"\`, atau \`skipped\` sebagai ganti \`done\`. Nama fase ditulis apa adanya seperti di atas.`;
       if (!phases.includes("Plan") || !phases.includes("Execute")) return base2;
       return base2 + `
-Execute BELUM selesai selama plan (\`docs/superpowers/plans/**\`) masih punya task \`- [ ]\`: kerjakan SEMUA PR/task sampai tiap kotak jadi \`- [x]\` sebelum menulis \`Execute done\`. hanoman menahan backlog di \`executing\`, bukan \`done\`, selama masih ada \`- [ ]\`.`;
-    };
-    PHASE_SKILLS = {
-      Brainstorm: ["superpowers:brainstorming"],
-      Audit: ["superpowers:systematic-debugging"],
-      Plan: ["superpowers:writing-plans"],
-      Execute: [
-        "superpowers:executing-plans",
-        "superpowers:test-driven-development",
-        "superpowers:verification-before-completion"
-      ],
-      // SPEC-407 · fase `Goal` sengaja TANPA skill: seluruh inti flow ini adalah membebaskan sesi
-      // dari proses kaku. Yang tetap dijaga cuma pintu keluarnya.
-      Verifikasi: ["superpowers:verification-before-completion"]
+Execute BELUM selesai selama plan (\`${method.planDir}/**\`) masih punya task \`- [ ]\`: kerjakan SEMUA PR/task sampai tiap kotak jadi \`- [x]\` sebelum menulis \`Execute done\`. hanoman menahan backlog di \`executing\`, bukan \`done\`, selama masih ada \`- [ ]\`.`;
     };
-    skillInstruction = (phases) => {
-      const lines2 = phases.filter((p) => PHASE_SKILLS[p]).map((p) => `- ${p}: ${PHASE_SKILLS[p].join(", ")}`);
-      return lines2.length ? `Skills superpowers WAJIB: sebelum mengerjakan fase di bawah, muat & ikuti skill-nya dengan mekanisme yang tersedia di agenmu \u2014 bila skill relevan tersedia, pakai.
+    skillInstruction = (phases, method, withExit) => {
+      const last = phases[phases.length - 1];
+      const lines2 = phases.map((p) => {
+        const own = method.phaseSkills[p] ?? [];
+        const skills = withExit && p === last ? [.../* @__PURE__ */ new Set([...own, ...method.exitSkills])] : own;
+        return skills.length ? `- ${p}: ${skills.join(", ")}` : "";
+      }).filter(Boolean);
+      return lines2.length ? `Skills ${method.label} WAJIB: sebelum mengerjakan fase di bawah, muat & ikuti skill-nya dengan mekanisme yang tersedia di agenmu \u2014 bila skill relevan tersedia, pakai.
 ${lines2.join("\n")}` : "";
     };
     auditDecisionInstruction = (flow) => flow !== "qa" ? "" : 'Keputusan pasca-Audit (qa): bila temuan berconfidence tinggi dan perbaikannya bisa dikerjakan langsung (diff kecil, akar masalah jelas), LEWATI Spec dan Plan \u2014 tandai keduanya `skipped` (`echo "Spec skipped" >> "$HANOMAN_PHASE_FILE"` lalu `echo "Plan skipped" >> "$HANOMAN_PHASE_FILE"`) dan langsung ke Execute; dokumen audit menjadi doc-of-record perbaikan itu. Bila temuan luas, berisiko, atau ambigu, jalankan Spec \u2192 Plan \u2192 Execute penuh. Keputusan ini milikmu berdasarkan hasil Audit, bukan default \u2014 jangan bayar perencanaan yang tak perlu untuk perbaikan sepele.';
@@ -8054,11 +8202,13 @@ ${lines2.join("\n")}` : "";
     writesCode = (flow) => PIPELINES[flow].includes("Execute") || PIPELINES[flow].includes("Goal");
     scopeClause = (flow, scope) => scope && writesCode(flow) ? verifyScopeClause(scope) : "";
     codeStyleClause = (flow) => writesCode(flow) ? CODE_STYLE_CLAUSE : "";
-    resumeClause = (r, branchTo, hasPlan = true) => {
+    methodClause = (method) => method.extraClause ?? "";
+    PROJECT_METHOD = resolveMethod();
+    resumeClause = (r, branchTo, planDir, hasPlan = true) => {
       const fase = r.recorded.length ? `Fase yang SUDAH tercatat di $HANOMAN_PHASE_FILE: ${r.recorded.join(" \xB7 ")}. JANGAN mengulang fase itu dan JANGAN menulis ulang barisnya.` : "Belum ada fase yang tercatat di $HANOMAN_PHASE_FILE \u2014 worktree ini sendiri yang jadi alasan melanjutkan.";
-      const lanjut = r.next ? `Lanjutkan dari fase: ${r.next}.` : hasPlan ? "Semua fase sudah tercatat. Periksa apakah plan di `docs/superpowers/plans/**` masih menyisakan task `- [ ]` dan selesaikan sisanya; bila sudah bersih, tinggal commit & push." : "Semua fase sudah tercatat. Buktikan sekali lagi goal-nya benar-benar tercapai, lalu commit & push.";
+      const lanjut = r.next ? `Lanjutkan dari fase: ${r.next}.` : hasPlan ? `Semua fase sudah tercatat. Periksa apakah plan di \`${planDir}/**\` masih menyisakan task \`- [ ]\` dan selesaikan sisanya; bila sudah bersih, tinggal commit & push.` : "Semua fase sudah tercatat. Buktikan sekali lagi goal-nya benar-benar tercapai, lalu commit & push.";
       const worktree = r.worktreeKept ? "Worktree ini adalah worktree sesi sebelumnya apa adanya \u2014 termasuk perubahan yang belum di-commit." : `Worktree ini DIBANGUN ULANG dari tip branch sesi \`${branchTo}\`: commit sesi sebelumnya ada, tetapi perubahan yang belum sempat di-commit TIDAK ada.`;
-      const baca = hasPlan ? "Sebelum menulis apa pun: baca `git log --oneline` dan `git status`, lalu plan di `docs/superpowers/plans/**` untuk backlog item ini (`- [x]` sudah selesai, `- [ ]` belum). Jangan menulis ulang yang sudah ada." : "Sebelum menulis apa pun: baca `git log --oneline` dan `git status` untuk melihat apa yang sudah dikerjakan. Jangan menulis ulang yang sudah ada.";
+      const baca = hasPlan ? `Sebelum menulis apa pun: baca \`git log --oneline\` dan \`git status\`, lalu plan di \`${planDir}/**\` untuk backlog item ini (\`- [x]\` sudah selesai, \`- [ ]\` belum). Jangan menulis ulang yang sudah ada.` : "Sebelum menulis apa pun: baca `git log --oneline` dan `git status` untuk melihat apa yang sudah dikerjakan. Jangan menulis ulang yang sudah ada.";
       return [
         "Sesi ini MELANJUTKAN pekerjaan sesi sebelumnya untuk backlog item yang sama \u2014 bukan memulai dari nol.",
         fase,
@@ -8243,8 +8393,9 @@ function defaultGoalCondition({ flow, specId, branchTo, spec }) {
     `1. output \`cat "$HANOMAN_PHASE_FILE"\` yang memuat satu baris untuk SETIAP fase ${phases.join(" \u2192 ")}, masing-masing berakhiran \`done\` atau \`skipped\`;`
   ];
   if (planGate) {
+    const dirs = PLAN_DIRS.map((d) => `${d}/`).join(" ");
     clauses.push(
-      `2. output \`grep -rn -- "- \\[ \\]" docs/superpowers/plans/\` yang KOSONG untuk plan backlog ini \u2014 tak ada task yang masih \`- [ ]\` (atau bukti bahwa backlog ini memang tak berplan);`
+      `2. output \`grep -rn -- "- \\[ \\]" ${dirs}\` yang KOSONG untuk plan backlog ini \u2014 tak ada task yang masih \`- [ ]\` (atau bukti bahwa backlog ini memang tak berplan);`
     );
   }
   clauses.push(
@@ -8269,6 +8420,7 @@ var GOAL_MAX, goalOneLine, GOAL_CHUNK;
 var init_goal = __esm({
   "../runner/src/goal.ts"() {
     "use strict";
+    init_src();
     init_prompt();
     init_goal_spec();
     GOAL_MAX = 4e3;
@@ -8309,12 +8461,14 @@ function codexGoalScript(o) {
     );
   }
   if (planGate) {
-    lines2.push(
-      `for f in ${shq(o.worktree)}/docs/superpowers/plans/*${o.specId.toLowerCase()}*; do`,
-      `  [ -f "$f" ] || continue`,
-      `  grep -qE '^[ 	]*- \\[ \\]' "$f" && missing="$missing\\n- plan $f masih punya task - [ ] yang belum selesai"`,
-      "done"
-    );
+    for (const dir2 of PLAN_DIRS) {
+      lines2.push(
+        `for f in ${shq(`${o.worktree}/${dir2}`)}/*${o.specId.toLowerCase()}*; do`,
+        `  [ -f "$f" ] || continue`,
+        `  grep -qE '^[ 	]*- \\[ \\]' "$f" && missing="$missing\\n- plan $f masih punya task - [ ] yang belum selesai"`,
+        "done"
+      );
+    }
   }
   lines2.push(
     'if [ -z "$missing" ]; then exit 0; fi',
@@ -8339,6 +8493,7 @@ var tq, shq, group, GOAL_MAX_BLOCKS;
 var init_codex_settings = __esm({
   "../runner/src/codex-settings.ts"() {
     "use strict";
+    init_src();
     init_prompt();
     tq = (s2) => `"${s2.split("\\").join("\\\\").split('"').join('\\"')}"`;
     shq = (s2) => `'${s2.split("'").join("'\\''")}'`;
@@ -8500,6 +8655,186 @@ var init_paths = __esm({
   }
 });
 
+// ../runner/src/skills.ts
+import { homedir as homedir2 } from "node:os";
+import { basename, dirname as dirname3, join as join2, resolve as resolve6 } from "node:path";
+import { existsSync as existsSync2, readdirSync, readFileSync as readFileSync2 } from "node:fs";
+function agentSkillHome(agent, env = process.env, osHome = homedir2()) {
+  const own = (agent === "codex" ? env.HANOMAN_CODEX_HOME : env.HANOMAN_CLAUDE_HOME)?.trim();
+  if (own) return own;
+  if (agent === "codex") {
+    const cx = env.CODEX_HOME?.trim();
+    if (cx) return cx;
+  }
+  return join2(osHome, agent === "codex" ? ".codex" : ".claude");
+}
+function agentsSkillHome(env = process.env, osHome = homedir2()) {
+  return env.HANOMAN_AGENTS_HOME?.trim() || join2(osHome, ".agents");
+}
+function dirsIn(dir2) {
+  try {
+    return readdirSync(dir2, { withFileTypes: true }).filter((e) => (e.isDirectory() || e.isSymbolicLink()) && !e.name.startsWith(".")).map((e) => e.name);
+  } catch {
+    return [];
+  }
+}
+function readJson(file) {
+  try {
+    return JSON.parse(readFileSync2(file, "utf8"));
+  } catch {
+    return null;
+  }
+}
+function isSkillDir(dir2) {
+  return existsSync2(join2(dir2, "SKILL.md"));
+}
+function asSkill(dir2, pkg, name2 = basename(dir2)) {
+  return { id: pkg ? `${pkg}:${name2}` : name2, name: name2, pkg, dir: dir2 };
+}
+function skillsUnder(dir2, pkg, depth = 2) {
+  const out3 = [];
+  for (const name2 of dirsIn(dir2)) {
+    const sub = join2(dir2, name2);
+    if (isSkillDir(sub)) out3.push(asSkill(sub, pkg, name2));
+    else if (depth > 1) out3.push(...skillsUnder(sub, pkg, depth - 1));
+  }
+  return out3;
+}
+function manifestSkills(installPath, pkg) {
+  for (const marker of [".claude-plugin", ".codex-plugin"]) {
+    const j = readJson(join2(installPath, marker, "plugin.json"));
+    const declared = j?.skills;
+    if (!Array.isArray(declared)) continue;
+    const out3 = [];
+    for (const rel of declared) {
+      if (typeof rel !== "string" || !rel) continue;
+      const p = resolve6(installPath, rel);
+      const dir2 = basename(p) === "SKILL.md" ? dirname3(p) : p;
+      if (isSkillDir(dir2)) out3.push(asSkill(dir2, pkg));
+    }
+    if (out3.length) return out3;
+  }
+  return [];
+}
+function pluginSkills(installPath, pkg) {
+  const declared = manifestSkills(installPath, pkg);
+  return declared.length ? declared : skillsUnder(join2(installPath, "skills"), pkg);
+}
+function lockPluginNames(agentsHome) {
+  const out3 = /* @__PURE__ */ new Map();
+  const j = readJson(join2(agentsHome, ".skill-lock.json"));
+  const skills = j?.skills;
+  if (!skills || typeof skills !== "object") return out3;
+  for (const [name2, entry] of Object.entries(skills)) {
+    const pkg = entry?.pluginName;
+    if (typeof pkg === "string" && pkg.trim()) out3.set(name2, pkg.trim());
+  }
+  return out3;
+}
+function splitPluginKey(key) {
+  const at = key.lastIndexOf("@");
+  return at > 0 ? { pkg: key.slice(0, at), marketplace: key.slice(at + 1) } : { pkg: key, marketplace: "" };
+}
+function manifestRoots(home2) {
+  const j = readJson(join2(home2, "plugins", "installed_plugins.json"));
+  const plugins = j?.plugins;
+  if (!plugins || typeof plugins !== "object") return [];
+  const out3 = [];
+  for (const [key, entries] of Object.entries(plugins)) {
+    const { pkg, marketplace } = splitPluginKey(key);
+    for (const e of Array.isArray(entries) ? entries : []) {
+      const p = e?.installPath;
+      if (typeof p === "string" && p) out3.push({ pkg, marketplace, dir: p });
+    }
+  }
+  return out3;
+}
+function cacheRoots(home2) {
+  const cache6 = join2(home2, "plugins", "cache");
+  const out3 = [];
+  for (const marketplace of dirsIn(cache6))
+    for (const pkg of dirsIn(join2(cache6, marketplace)))
+      for (const version of dirsIn(join2(cache6, marketplace, pkg)))
+        out3.push({ pkg, marketplace, dir: join2(cache6, marketplace, pkg, version) });
+  return out3;
+}
+function disabledPlugins(agent, home2) {
+  const out3 = /* @__PURE__ */ new Set();
+  if (agent === "claude") {
+    const en = readJson(join2(home2, "settings.json"))?.enabledPlugins;
+    if (en && typeof en === "object") {
+      for (const [k, v] of Object.entries(en)) if (v === false) out3.add(k);
+    }
+    return out3;
+  }
+  let toml;
+  try {
+    toml = readFileSync2(join2(home2, "config.toml"), "utf8");
+  } catch {
+    return out3;
+  }
+  let current = null;
+  for (const raw of toml.split("\n")) {
+    const line = raw.trim();
+    const head = /^\[([^\]]*)\]$/.exec(line);
+    if (head) {
+      const m = /^plugins\."(.+)"$/.exec(head[1] ?? "");
+      current = m ? m[1] : null;
+      continue;
+    }
+    if (current && /^enabled\s*=\s*false\b/.test(line)) out3.add(current);
+  }
+  return out3;
+}
+function scanAgentSkills(agent, env = process.env, osHome = homedir2()) {
+  const home2 = agentSkillHome(agent, env, osHome);
+  const disabled = disabledPlugins(agent, home2);
+  const roots = [];
+  const skills = [];
+  const packages = /* @__PURE__ */ new Set();
+  const seenSkill = /* @__PURE__ */ new Set();
+  const seenRoot = /* @__PURE__ */ new Set();
+  const add = (dir2, found) => {
+    if (!found.length) return;
+    if (!seenRoot.has(dir2)) {
+      seenRoot.add(dir2);
+      roots.push(dir2);
+    }
+    for (const s2 of found) if (!seenSkill.has(s2.id)) {
+      seenSkill.add(s2.id);
+      skills.push(s2);
+    }
+  };
+  const userDir = join2(home2, "skills");
+  add(userDir, skillsUnder(userDir, null));
+  for (const r of [...manifestRoots(home2), ...cacheRoots(home2)]) {
+    if (disabled.has(`${r.pkg}@${r.marketplace}`)) continue;
+    const found = pluginSkills(r.dir, r.pkg);
+    if (!found.length) continue;
+    packages.add(r.pkg);
+    add(join2(r.dir, "skills"), found);
+  }
+  if (agent === "codex") {
+    const agentsHome = agentsSkillHome(env, osHome);
+    const dir2 = join2(agentsHome, "skills");
+    const names = lockPluginNames(agentsHome);
+    const flat = skillsUnder(dir2, null);
+    const withPkg = flat.flatMap((s2) => {
+      const pkg = names.get(s2.name);
+      if (!pkg) return [s2];
+      packages.add(pkg);
+      return [asSkill(s2.dir, pkg, s2.name), s2];
+    });
+    add(dir2, withPkg);
+  }
+  return { agent, home: home2, roots, skills, packages: [...packages] };
+}
+var init_skills = __esm({
+  "../runner/src/skills.ts"() {
+    "use strict";
+  }
+});
+
 // ../runner/src/telegram-operator.ts
 function buildTelegramOperatorPrompt(input) {
   const personality = input.personality ? [
@@ -8588,6 +8923,7 @@ var init_src2 = __esm({
     init_verify_scope();
     init_code_style();
     init_paths();
+    init_skills();
     init_telegram_operator();
   }
 });
@@ -8724,7 +9060,7 @@ var init_tap = __esm({
 
 // src/db.ts
 import { mkdirSync as mkdirSync2 } from "node:fs";
-import { dirname as dirname3, resolve as resolve6 } from "node:path";
+import { dirname as dirname4, resolve as resolve7 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 import { PrismaClient } from "@prisma/client";
 var schemaDir, notice, url, base, prisma;
@@ -8734,12 +9070,12 @@ var init_db = __esm({
     init_env();
     init_src2();
     init_tap();
-    schemaDir = resolve6(dirname3(fileURLToPath2(import.meta.url)), "../prisma");
+    schemaDir = resolve7(dirname4(fileURLToPath2(import.meta.url)), "../prisma");
     notice = dbUrlNotice(process.env);
     if (notice) console.warn(notice);
     url = resolveDbUrl(process.env, schemaDir);
     process.env.DATABASE_URL = url;
-    mkdirSync2(dirname3(dbFilePath(url)), { recursive: true });
+    mkdirSync2(dirname4(dbFilePath(url)), { recursive: true });
     base = new PrismaClient();
     prisma = base.$extends(webhookTap(base));
   }
@@ -8755,12 +9091,12 @@ var init_stage_machine = __esm({
 });
 
 // src/services/session-phases.ts
-import { readFileSync as readFileSync2, readdirSync } from "node:fs";
+import { readFileSync as readFileSync3, readdirSync as readdirSync2 } from "node:fs";
 function recorded(file) {
   const out3 = /* @__PURE__ */ new Map();
   let raw;
   try {
-    raw = readFileSync2(file, "utf8");
+    raw = readFileSync3(file, "utf8");
   } catch {
     return out3;
   }
@@ -8798,19 +9134,21 @@ function stageFor(phases) {
   return best < 0 ? null : STAGES[best];
 }
 function planComplete(worktree, specId) {
-  const dir2 = `${worktree}/docs/superpowers/plans`;
   const re = new RegExp(`(^|[^a-z0-9])${specId.toLowerCase()}([^0-9]|$)`);
-  let names;
-  try {
-    names = readdirSync(dir2);
-  } catch {
-    return true;
-  }
-  for (const n2 of names) {
-    if (!re.test(n2.toLowerCase())) continue;
+  for (const rel of PLAN_DIRS) {
+    const dir2 = `${worktree}/${rel}`;
+    let names;
     try {
-      if (/^[ \t]*- \[ \]/m.test(readFileSync2(`${dir2}/${n2}`, "utf8"))) return false;
+      names = readdirSync2(dir2);
     } catch {
+      continue;
+    }
+    for (const n2 of names) {
+      if (!re.test(n2.toLowerCase())) continue;
+      try {
+        if (/^[ \t]*- \[ \]/m.test(readFileSync3(`${dir2}/${n2}`, "utf8"))) return false;
+      } catch {
+      }
     }
   }
   return true;
@@ -8829,6 +9167,7 @@ var init_session_phases = __esm({
   "src/services/session-phases.ts"() {
     "use strict";
     init_src2();
+    init_src();
     init_stage_machine();
     phaseFilePath = (repoDir, sessionId2) => `${repoDir}/.worktrees/.phases/${sessionId2}`;
     decisionFilePath = (repoDir, sessionId2) => `${repoDir}/.worktrees/.decisions/${sessionId2}`;
@@ -9090,9 +9429,9 @@ var init_tui_dialog = __esm({
 });
 
 // src/services/secret-box.ts
-import { chmodSync, existsSync as existsSync2, mkdirSync as mkdirSync3, readFileSync as readFileSync3, writeFileSync } from "node:fs";
+import { chmodSync, existsSync as existsSync3, mkdirSync as mkdirSync3, readFileSync as readFileSync4, writeFileSync } from "node:fs";
 import { createCipheriv, createDecipheriv, randomBytes } from "node:crypto";
-import { dirname as dirname4, join as join2 } from "node:path";
+import { dirname as dirname5, join as join3 } from "node:path";
 function isEncrypted(value) {
   return value.startsWith(ENC_PREFIX);
 }
@@ -9124,7 +9463,7 @@ function fromEnv(raw) {
   return null;
 }
 function secretKeyPath() {
-  return join2(resolveHome(), "secret.key");
+  return join3(resolveHome(), "secret.key");
 }
 function secretKey() {
   if (cached) return cached;
@@ -9136,14 +9475,14 @@ function secretKey() {
     return key2;
   }
   const path = secretKeyPath();
-  if (existsSync2(path)) {
-    const key2 = Buffer.from(readFileSync3(path, "utf8").trim(), "base64url");
+  if (existsSync3(path)) {
+    const key2 = Buffer.from(readFileSync4(path, "utf8").trim(), "base64url");
     if (key2.length !== KEY_BYTES) throw new Error(`kunci di ${path} rusak \u2014 panjangnya bukan 32 byte`);
     cached = key2;
     return key2;
   }
   const key = randomBytes(KEY_BYTES);
-  mkdirSync3(dirname4(path), { recursive: true });
+  mkdirSync3(dirname5(path), { recursive: true });
   writeFileSync(path, key.toString("base64url"), { mode: 384 });
   chmodSync(path, 384);
   cached = key;
@@ -9242,7 +9581,7 @@ import { spawn } from "node-pty";
 import { execFileSync } from "node:child_process";
 import { randomUUID } from "node:crypto";
 import { mkdirSync as mkdirSync4, statSync, writeFileSync as writeFileSync2 } from "node:fs";
-import { dirname as dirname5 } from "node:path";
+import { dirname as dirname6 } from "node:path";
 import { tmpdir } from "node:os";
 function tmux(...args) {
   try {
@@ -9324,7 +9663,7 @@ function createSession(projectId, cwd, opts = {}) {
   let promptArg = "";
   if (!opts.command && opts.prompt) {
     const promptFile = promptFilePath(id);
-    mkdirSync4(dirname5(promptFile), { recursive: true });
+    mkdirSync4(dirname6(promptFile), { recursive: true });
     writeFileSync2(promptFile, opts.prompt + rosterBlock);
     promptArg = `"$(cat ${sq(promptFile)})"`;
   }
@@ -9336,7 +9675,7 @@ function createSession(projectId, cwd, opts = {}) {
     let goalGate;
     if (agent === "codex" && opts.goal && opts.flow && opts.specId) {
       goalGate = goalGatePath(id);
-      mkdirSync4(dirname5(goalGate), { recursive: true });
+      mkdirSync4(dirname6(goalGate), { recursive: true });
       writeFileSync2(goalGate, codexGoalScript({
         flow: opts.flow,
         specId: opts.specId,
@@ -9352,7 +9691,7 @@ function createSession(projectId, cwd, opts = {}) {
       const json = renderAgentsJson(customDefs);
       if (json) {
         agentsFile = agentsFilePath(id);
-        mkdirSync4(dirname5(agentsFile), { recursive: true });
+        mkdirSync4(dirname6(agentsFile), { recursive: true });
         writeFileSync2(agentsFile, json);
       }
     }
@@ -9372,12 +9711,12 @@ function createSession(projectId, cwd, opts = {}) {
     for (const [k, v] of Object.entries(rootBypassEnv())) envPairs.push(`${k}=${sq(v)}`);
   }
   if (opts.phaseFile) {
-    mkdirSync4(dirname5(opts.phaseFile), { recursive: true });
+    mkdirSync4(dirname6(opts.phaseFile), { recursive: true });
     envPairs.push(`HANOMAN_PHASE_FILE=${sq(opts.phaseFile)}`);
   }
   for (const [k, v] of Object.entries(opts.env ?? {})) envPairs.push(`${k}=${sq(v)}`);
   const cmd = envPairs.length ? `${envPairs.join(" ")} ${argv}` : argv;
-  if (opts.decisionFile) mkdirSync4(dirname5(opts.decisionFile), { recursive: true });
+  if (opts.decisionFile) mkdirSync4(dirname6(opts.decisionFile), { recursive: true });
   tmux(
     "set-option",
     "-g",
@@ -10199,6 +10538,8 @@ var init_settings2 = __esm({
       // SPEC-338 · ADR-0074 · model/effort codex
       verifyScope: "changed",
       // SPEC-376 · ADR-0080 · uji hanya yang berubah
+      method: DEFAULT_METHOD,
+      // SPEC-734 · ADR-0113 · metode workflow default
       conflict: CONFLICT_DEFAULTS,
       // SPEC-383 · ADR-0081 · default sesi konflik (opt-in, mati)
       lead: LEAD_DEFAULTS,
@@ -10213,8 +10554,8 @@ var init_settings2 = __esm({
 });
 
 // src/services/codex-trust.ts
-import { appendFileSync, mkdirSync as mkdirSync6, readFileSync as readFileSync5, realpathSync as realpathSync2 } from "node:fs";
-import { homedir as homedir2 } from "node:os";
+import { appendFileSync, mkdirSync as mkdirSync6, readFileSync as readFileSync6, realpathSync as realpathSync2 } from "node:fs";
+import { homedir as homedir3 } from "node:os";
 function ensureCodexTrust(repoDir, home2) {
   const path = codexConfigPath(home2);
   let canonical = repoDir;
@@ -10226,7 +10567,7 @@ function ensureCodexTrust(repoDir, home2) {
   try {
     let existing = "";
     try {
-      existing = readFileSync5(path, "utf8");
+      existing = readFileSync6(path, "utf8");
     } catch {
     }
     if (existing.includes(header2)) return;
@@ -10243,7 +10584,7 @@ var codexHome, codexConfigPath;
 var init_codex_trust = __esm({
   "src/services/codex-trust.ts"() {
     "use strict";
-    codexHome = (home2) => home2 ?? process.env.CODEX_HOME ?? `${homedir2()}/.codex`;
+    codexHome = (home2) => home2 ?? process.env.CODEX_HOME ?? `${homedir3()}/.codex`;
     codexConfigPath = (home2) => `${codexHome(home2)}/config.toml`;
   }
 });
@@ -10886,7 +11227,7 @@ var init_gateway = __esm({
             const message = sanitizeTelegramOutput(error.message, this.deps.exactSecrets).slice(0, 500);
             updateTelegramRuntimeStatus({ running: false, readiness: "error", lastError: message });
             if (error instanceof TelegramApiError && error.code === 409) return;
-            await new Promise((resolve15) => setTimeout(resolve15, 1e3));
+            await new Promise((resolve16) => setTimeout(resolve16, 1e3));
           }
         }
       }
@@ -16896,7 +17237,7 @@ var require_parseParams = __commonJS({
 var require_basename = __commonJS({
   "../node_modules/.pnpm/@fastify+busboy@3.2.0/node_modules/@fastify/busboy/lib/utils/basename.js"(exports, module) {
     "use strict";
-    module.exports = function basename3(path) {
+    module.exports = function basename4(path) {
       if (typeof path !== "string") {
         return "";
       }
@@ -16923,7 +17264,7 @@ var require_multipart = __commonJS({
     var Dicer = require_Dicer();
     var parseParams = require_parseParams();
     var decodeText = require_decodeText();
-    var basename3 = require_basename();
+    var basename4 = require_basename();
     var getLimit = require_getLimit();
     var RE_BOUNDARY = /^boundary$/i;
     var RE_FIELD = /^form-data$/i;
@@ -17040,7 +17381,7 @@ var require_multipart = __commonJS({
               } else if (RE_FILENAME.test(parsed[i][0])) {
                 filename = parsed[i][1];
                 if (!preservePath) {
-                  filename = basename3(filename);
+                  filename = basename4(filename);
                 }
               }
             }
@@ -18124,17 +18465,17 @@ var require_stream_wormhole = __commonJS({
   "../node_modules/.pnpm/stream-wormhole@1.1.0/node_modules/stream-wormhole/index.js"(exports, module) {
     "use strict";
     module.exports = (stream, throwError) => {
-      return new Promise((resolve15, reject2) => {
+      return new Promise((resolve16, reject2) => {
         if (typeof stream.resume !== "function") {
-          return resolve15();
+          return resolve16();
         }
         stream.unpipe && stream.unpipe();
         stream.resume();
         if (stream._readableState && stream._readableState.ended) {
-          return resolve15();
+          return resolve16();
         }
         if (!stream.readable || stream.destroyed) {
-          return resolve15();
+          return resolve16();
         }
         function cleanup() {
           stream.removeListener("end", onEnd);
@@ -18143,14 +18484,14 @@ var require_stream_wormhole = __commonJS({
         }
         function onEnd() {
           cleanup();
-          resolve15();
+          resolve16();
         }
         function onError(err) {
           cleanup();
           if (throwError) {
             reject2(err);
           } else {
-            resolve15();
+            resolve16();
           }
         }
         stream.on("end", onEnd);
@@ -18585,16 +18926,16 @@ var require_multipart2 = __commonJS({
           }
         };
         const parts = () => {
-          return new Promise((resolve15, reject2) => {
+          return new Promise((resolve16, reject2) => {
             handle((val) => {
               if (val instanceof Error) {
                 if (val.message === "Unexpected end of multipart data") {
-                  resolve15(null);
+                  resolve16(null);
                 } else {
                   reject2(val);
                 }
               } else {
-                resolve15(val);
+                resolve16(val);
               }
             });
           });
@@ -18860,8 +19201,8 @@ import fastifyStatic from "@fastify/static";
 import websocket from "@fastify/websocket";
 import cookie from "@fastify/cookie";
 import { fileURLToPath as fileURLToPath4 } from "node:url";
-import { dirname as dirname13 } from "node:path";
-import { existsSync as existsSync13 } from "node:fs";
+import { dirname as dirname14 } from "node:path";
+import { existsSync as existsSync14 } from "node:fs";
 
 // src/web-dir.ts
 import { resolve } from "node:path";
@@ -18923,8 +19264,8 @@ init_stage_machine();
 init_src();
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";
-import { readFileSync as readFileSync4, writeFileSync as writeFileSync3, existsSync as existsSync3, rmSync as rmSync2, mkdirSync as mkdirSync5 } from "node:fs";
-import { resolve as resolve7, dirname as dirname6, sep } from "node:path";
+import { readFileSync as readFileSync5, writeFileSync as writeFileSync3, existsSync as existsSync4, rmSync as rmSync2, mkdirSync as mkdirSync5 } from "node:fs";
+import { resolve as resolve8, dirname as dirname7, sep } from "node:path";
 var exec = promisify(execFile);
 async function listRepoDocs(repoDir) {
   try {
@@ -18940,7 +19281,7 @@ async function listRepoDocs(repoDir) {
 }
 function docsDirOf(repoDir) {
   try {
-    const raw = readFileSync4(resolve7(repoDir, "hanoman.config.json"), "utf8");
+    const raw = readFileSync5(resolve8(repoDir, "hanoman.config.json"), "utf8");
     return zHanomanConfig.parse(JSON.parse(raw)).docsDir;
   } catch {
     return zHanomanConfig.parse({}).docsDir;
@@ -18948,18 +19289,18 @@ function docsDirOf(repoDir) {
 }
 function resolveIndex(repoDir, docsDir) {
   const rel = `${docsDir}/README.md`;
-  return existsSync3(resolve7(repoDir, rel)) ? rel : "";
+  return existsSync4(resolve8(repoDir, rel)) ? rel : "";
 }
 var catOf = (rel) => rel.includes("/") ? rel.slice(0, rel.lastIndexOf("/")) : ".";
 var nameOf = (rel) => rel.includes("/") ? rel.slice(rel.lastIndexOf("/") + 1) : rel;
 async function scanRepoDocs(repoDir) {
-  if (!repoDir || !existsSync3(repoDir)) return { coverage: 0, tree: [] };
+  if (!repoDir || !existsSync4(repoDir)) return { coverage: 0, tree: [] };
   const files = await listRepoDocs(repoDir);
   const docsDir = docsDirOf(repoDir);
   const index = resolveIndex(repoDir, docsDir);
   const read = (rel) => {
     try {
-      return readFileSync4(resolve7(repoDir, rel), "utf8");
+      return readFileSync5(resolve8(repoDir, rel), "utf8");
     } catch {
       return null;
     }
@@ -18982,25 +19323,25 @@ async function scanRepoDocs(repoDir) {
 function docAbsPath(repoDir, rel) {
   if (!rel.endsWith(".md")) throw new Error("hanya file .md yang diizinkan");
   if (rel.split("/").includes(".git")) throw new Error("tidak boleh menyentuh .git");
-  const abs = resolve7(repoDir, rel);
+  const abs = resolve8(repoDir, rel);
   if (abs !== repoDir && !abs.startsWith(repoDir + sep)) throw new Error("path keluar dari repo");
   return abs;
 }
 function readDocFile(repoDir, rel) {
   try {
-    return readFileSync4(docAbsPath(repoDir, rel), "utf8");
+    return readFileSync5(docAbsPath(repoDir, rel), "utf8");
   } catch {
     return null;
   }
 }
 function writeDocFile(repoDir, rel, content) {
   const abs = docAbsPath(repoDir, rel);
-  mkdirSync5(dirname6(abs), { recursive: true });
+  mkdirSync5(dirname7(abs), { recursive: true });
   writeFileSync3(abs, content);
 }
 function deleteDocFile(repoDir, rel) {
   const abs = docAbsPath(repoDir, rel);
-  if (!existsSync3(abs)) return false;
+  if (!existsSync4(abs)) return false;
   rmSync2(abs);
   return true;
 }
@@ -19287,13 +19628,13 @@ async function projects_default(app2) {
 // src/routes/specs.ts
 init_src();
 init_src2();
-import { existsSync as existsSync4 } from "node:fs";
+import { existsSync as existsSync5 } from "node:fs";
 
 // src/services/integrate.ts
 import { execFile as execFile3 } from "node:child_process";
 import { promisify as promisify3 } from "node:util";
 import { rmSync as rmSync3 } from "node:fs";
-import { join as join3 } from "node:path";
+import { join as join4 } from "node:path";
 var sanitize = (id) => id.toLowerCase().replace(/[^a-z0-9_-]/g, "_");
 var sourceBranch = (specId) => `hanoman/${sanitize(specId)}`;
 var exec3 = promisify3(execFile3);
@@ -19337,7 +19678,7 @@ async function integrateBranch(repoDir, src, op, target2) {
   const tgt = await resolveTarget(repoDir, target2);
   if (!tgt) return { status: "error", code: 400, error: `target "${target2}" tidak dikenal` };
   await sh(repoDir, ["fetch", "origin"]);
-  const wt = join3(repoDir, ".worktrees", `merge-${sanitize(src.mergeId)}`);
+  const wt = join4(repoDir, ".worktrees", `merge-${sanitize(src.mergeId)}`);
   await reclaim(repoDir, wt);
   const baseRef = op === "merge" ? tgt.ref : source;
   const baseSha = await out(repoDir, ["rev-parse", "--verify", "--end-of-options", `${baseRef}^{commit}`]);
@@ -19398,7 +19739,7 @@ async function mergeIntoCurrent(repoDir, source, opts = {}) {
   const src = await resolveGraphSource(repoDir, source);
   if (!src) return { status: "error", code: 400, error: `source "${source}" tak dikenal` };
   await sh(repoDir, ["fetch", "origin"]);
-  const wt = join3(repoDir, ".worktrees", `merge-${sanitize(current)}`);
+  const wt = join4(repoDir, ".worktrees", `merge-${sanitize(current)}`);
   await reclaim(repoDir, wt);
   const baseSha = await out(repoDir, ["rev-parse", "--verify", "--end-of-options", `refs/heads/${current}^{commit}`]);
   if (!await ok(repoDir, ["worktree", "add", "--detach", "-q", wt, baseSha]))
@@ -19436,7 +19777,7 @@ async function replayCurrent(repoDir, source, cmd) {
   const current = await out(repoDir, ["rev-parse", "--abbrev-ref", "HEAD"]);
   if (!current || current === "HEAD")
     return { status: "error", code: 409, error: "HEAD detached \u2014 checkout sebuah branch dulu" };
-  const wt = join3(repoDir, ".worktrees", `merge-${sanitize(current)}`);
+  const wt = join4(repoDir, ".worktrees", `merge-${sanitize(current)}`);
   await reclaim(repoDir, wt);
   const baseSha = await out(repoDir, ["rev-parse", "--verify", "--end-of-options", `refs/heads/${current}^{commit}`]);
   if (!await ok(repoDir, ["worktree", "add", "--detach", "-q", wt, baseSha]))
@@ -19485,16 +19826,16 @@ import { execFile as execFile4 } from "node:child_process";
 import { promisify as promisify4 } from "node:util";
 import { readFile as readFile2, mkdtemp, copyFile, rm } from "node:fs/promises";
 import { tmpdir as tmpdir2 } from "node:os";
-import { join as join4, resolve as resolve8 } from "node:path";
+import { join as join5, resolve as resolve9 } from "node:path";
 var exec4 = promisify4(execFile4);
 var GIT3 = { maxBuffer: 1 << 24 };
 var MAX = 256 * 1024;
-var worktreeDir = (repoDir, specId) => join4(repoDir, ".worktrees", specId.toLowerCase().replace(/[^a-z0-9_-]/g, "_"));
+var worktreeDir = (repoDir, specId) => join5(repoDir, ".worktrees", specId.toLowerCase().replace(/[^a-z0-9_-]/g, "_"));
 async function withTempIndex(wt, fn) {
   const idx = (await exec4("git", ["rev-parse", "--git-path", "index"], { cwd: wt, ...GIT3 })).stdout.trim();
-  const dir2 = await mkdtemp(join4(tmpdir2(), "hanoman-idx-"));
-  const tmp = join4(dir2, "index");
-  await copyFile(resolve8(wt, idx), tmp);
+  const dir2 = await mkdtemp(join5(tmpdir2(), "hanoman-idx-"));
+  const tmp = join5(dir2, "index");
+  await copyFile(resolve9(wt, idx), tmp);
   const env = { ...process.env, GIT_INDEX_FILE: tmp };
   try {
     await exec4("git", ["add", "-A", "-N"], { cwd: wt, env, ...GIT3 });
@@ -19618,7 +19959,7 @@ async function reviewFile(repoDir, specId, baseSha, branchFrom, path) {
   let contentRaw = null;
   if (status !== "D") {
     try {
-      contentRaw = await readFile2(join4(wt, path), "utf8");
+      contentRaw = await readFile2(join5(wt, path), "utf8");
     } catch {
       contentRaw = null;
     }
@@ -19803,14 +20144,15 @@ async function notificationsFeed(p = {}) {
 init_stage_machine();
 
 // src/services/stage-artifacts.ts
+init_src();
 init_stage_machine();
 var ARTIFACT_DIR = {
-  "spec-ready": "docs/superpowers/specs/",
-  planned: "docs/superpowers/plans/"
+  "spec-ready": SPEC_DIRS.map((d) => `${d}/`),
+  planned: PLAN_DIRS.map((d) => `${d}/`)
 };
 async function artifactsToRemove(projectId, specId, target2, current) {
   const ti = STAGES.indexOf(target2), ci = STAGES.indexOf(current);
-  const dirs = STAGES.filter((_, i) => i > ti && i <= ci).map((s2) => ARTIFACT_DIR[s2]).filter((d) => !!d);
+  const dirs = STAGES.filter((_, i) => i > ti && i <= ci).flatMap((s2) => ARTIFACT_DIR[s2] ?? []);
   if (!dirs.length) return [];
   const repoDir = await resolveRepoDir(projectId);
   if (!repoDir) return [];
@@ -19842,6 +20184,7 @@ async function deleteDoc(projectId, path) {
 }
 
 // src/services/spec-docs.ts
+init_src();
 init_db();
 init_pty();
 var ORDER = ["audit", "spec", "plan", "objective", "brainstorm", "other"];
@@ -19850,8 +20193,8 @@ function kindOf(path) {
   if (p.endsWith("-audit.md") || p.includes("/research/audit-")) return "audit";
   if (p.endsWith("-objective.md")) return "objective";
   if (p.endsWith("-brainstorm.md")) return "brainstorm";
-  if (p.endsWith("-design.md") || p.endsWith("-spec.md") || p.startsWith("docs/superpowers/specs/")) return "spec";
-  if (p.startsWith("docs/superpowers/plans/") || p.endsWith("-plan.md")) return "plan";
+  if (p.endsWith("-design.md") || p.endsWith("-spec.md") || SPEC_DIRS.some((d) => p.startsWith(`${d}/`))) return "spec";
+  if (PLAN_DIRS.some((d) => p.startsWith(`${d}/`)) || p.endsWith("-plan.md")) return "plan";
   return "other";
 }
 async function resolveDir(specId, sessions = listSessions()) {
@@ -22381,7 +22724,7 @@ function renderDocPdf(text, name2, meta) {
   });
   const chunks = [];
   doc.on("data", (c) => chunks.push(c));
-  const done = new Promise((resolve15) => doc.on("end", () => resolve15(Buffer.concat(chunks))));
+  const done = new Promise((resolve16) => doc.on("end", () => resolve16(Buffer.concat(chunks))));
   doc.font("Helvetica-Bold").fontSize(8).fillColor(BRASS).text(toWinAnsi(meta.eyebrow.toUpperCase()), { characterSpacing: 0.8 });
   doc.moveDown(0.25);
   doc.font("Helvetica-Bold").fontSize(17).fillColor(STRONG).text(toWinAnsi(name2.split("/").pop() ?? name2));
@@ -22763,7 +23106,7 @@ ${item.context}` : item.context;
   });
   const specWithProject = (id) => prisma.spec.findUnique({ where: { id }, include: { project: true } });
   const resolveReview = async (repoDir, spec) => {
-    if (existsSync4(worktreeDir(repoDir, spec.id))) return { wt: true };
+    if (existsSync5(worktreeDir(repoDir, spec.id))) return { wt: true };
     if (spec.baseSha && spec.headSha && await shaResolvable(repoDir, spec.baseSha) && await shaResolvable(repoDir, spec.headSha))
       return { wt: false, base: spec.baseSha, head: spec.headSha };
     const r = await specCommitRange(repoDir, spec.id);
@@ -22998,13 +23341,13 @@ async function docs_default(app2) {
 
 // src/routes/ide.ts
 init_src2();
-import { basename } from "node:path";
+import { basename as basename2 } from "node:path";
 import { spawn as spawn2 } from "node:child_process";
 
 // src/services/git-remotes.ts
 import { execFile as execFile5 } from "node:child_process";
 import { promisify as promisify5 } from "node:util";
-import { existsSync as existsSync5 } from "node:fs";
+import { existsSync as existsSync6 } from "node:fs";
 var exec5 = promisify5(execFile5);
 var GIT4 = { maxBuffer: 1 << 24, encoding: "utf8" };
 function parseRemote(url2) {
@@ -23023,7 +23366,7 @@ function prUrl(remoteUrl, branch, base2 = "main") {
   return null;
 }
 async function listRemotes(repoDir) {
-  if (!repoDir || !existsSync5(repoDir)) return [];
+  if (!repoDir || !existsSync6(repoDir)) return [];
   try {
     const { stdout } = await exec5("git", ["remote", "-v"], { cwd: repoDir, ...GIT4 });
     const map = /* @__PURE__ */ new Map();
@@ -23065,20 +23408,20 @@ import { promisify as promisify7 } from "node:util";
 import { execFile as execFile6 } from "node:child_process";
 import { promisify as promisify6 } from "node:util";
 import { readFile as readFile3, writeFile, mkdir } from "node:fs/promises";
-import { existsSync as existsSync6 } from "node:fs";
-import { resolve as resolve9, sep as sep2, dirname as dirname8 } from "node:path";
+import { existsSync as existsSync7 } from "node:fs";
+import { resolve as resolve10, sep as sep2, dirname as dirname9 } from "node:path";
 var exec6 = promisify6(execFile6);
 var GIT5 = { maxBuffer: 1 << 24 };
 var MAX2 = 256 * 1024;
 var splitZ2 = (s2) => s2.split("\0").filter(Boolean);
 function repoAbsPath(repoDir, rel) {
   if (rel.split(/[\\/]/).includes(".git")) throw new Error("tidak boleh menyentuh .git");
-  const abs = resolve9(repoDir, rel);
+  const abs = resolve10(repoDir, rel);
   if (abs !== repoDir && !abs.startsWith(repoDir + sep2)) throw new Error("path keluar dari repo");
   return abs;
 }
 async function listRepoTree(repoDir, ref = "") {
-  if (!repoDir || !existsSync6(repoDir)) return [];
+  if (!repoDir || !existsSync7(repoDir)) return [];
   try {
     const { stdout } = ref ? await exec6("git", ["ls-tree", "-r", "--name-only", "-z", ref], { cwd: repoDir, ...GIT5 }) : await exec6("git", ["ls-files", "--cached", "--others", "--exclude-standard", "-z"], { cwd: repoDir, ...GIT5 });
     return [...new Set(splitZ2(stdout))].sort();
@@ -23104,7 +23447,7 @@ async function currentBranch(repoDir) {
 }
 async function repoStatus(repoDir) {
   const empty = { branch: "", ahead: 0, behind: 0, staged: [], unstaged: [], untracked: [], clean: true };
-  if (!repoDir || !existsSync6(repoDir)) return empty;
+  if (!repoDir || !existsSync7(repoDir)) return empty;
   try {
     const { stdout } = await exec6("git", ["status", "--porcelain=v1", "-z", "-b"], { cwd: repoDir, ...GIT5 });
     const parts = stdout.split("\0");
@@ -23137,7 +23480,7 @@ async function repoStatus(repoDir) {
   }
 }
 async function listStashes(repoDir) {
-  if (!repoDir || !existsSync6(repoDir)) return [];
+  if (!repoDir || !existsSync7(repoDir)) return [];
   try {
     const { stdout } = await exec6("git", ["stash", "list", `--format=%gd${US}%s${US}%aI`], { cwd: repoDir, ...GIT5 });
     return stdout.split("\n").filter(Boolean).map((line) => {
@@ -23149,7 +23492,7 @@ async function listStashes(repoDir) {
   }
 }
 async function listGraph(repoDir, limit = 200, opts = {}) {
-  if (!repoDir || !existsSync6(repoDir)) return { commits: [], current: "", total: 0 };
+  if (!repoDir || !existsSync7(repoDir)) return { commits: [], current: "", total: 0 };
   try {
     const fmt = ["%H", "%P", "%an", "%aI", "%s", "%D"].join(US);
     const refArgs = opts.branches?.length ? ["--end-of-options", ...opts.branches] : [
@@ -23219,7 +23562,7 @@ async function changedOf(repoDir, sha) {
 }
 async function compareCommits(repoDir, from, to) {
   const empty = { from, to, changed: [] };
-  if (!repoDir || !existsSync6(repoDir)) return empty;
+  if (!repoDir || !existsSync7(repoDir)) return empty;
   try {
     const [num, name2] = await Promise.all([
       exec6("git", ["diff", "--numstat", "-z", "--no-renames", "--end-of-options", from, to], { cwd: repoDir, ...GIT5 }),
@@ -23231,7 +23574,7 @@ async function compareCommits(repoDir, from, to) {
   }
 }
 async function searchCommits(repoDir, q, by = "all") {
-  if (!repoDir || !existsSync6(repoDir) || !q) return [];
+  if (!repoDir || !existsSync7(repoDir) || !q) return [];
   const run2 = async (extra) => {
     try {
       return (await exec6("git", ["log", "--all", "--format=%H", ...extra], { cwd: repoDir, ...GIT5 })).stdout.split("\n").filter(Boolean);
@@ -23312,7 +23655,7 @@ async function commitFileDiff(repoDir, sha, rel) {
 async function writeRepoFile(repoDir, rel, content) {
   if (!repoDir) throw new Error("project tidak punya repoDir");
   const abs = repoAbsPath(repoDir, rel);
-  await mkdir(dirname8(abs), { recursive: true });
+  await mkdir(dirname9(abs), { recursive: true });
   await writeFile(abs, content);
 }
 function validateGitOp(op) {
@@ -23480,7 +23823,7 @@ async function runGitOp(repoDir, op) {
   }
 }
 async function workingStatus(repoDir) {
-  if (!repoDir || !existsSync6(repoDir)) return { branch: "", staged: [], unstaged: [] };
+  if (!repoDir || !existsSync7(repoDir)) return { branch: "", staged: [], unstaged: [] };
   const [branch, staged, unstaged] = await Promise.all([
     currentBranch(repoDir),
     changedFiles(repoDir, ["--cached"]),
@@ -23489,7 +23832,7 @@ async function workingStatus(repoDir) {
   return { branch, staged, unstaged };
 }
 async function workingFileDiff(repoDir, path, staged) {
-  if (!repoDir || !existsSync6(repoDir)) return null;
+  if (!repoDir || !existsSync7(repoDir)) return null;
   repoAbsPath(repoDir, path);
   const changed = staged ? await changedFiles(repoDir, ["--cached"]) : await withTempIndex(repoDir, (env) => changedFiles(repoDir, [], env));
   const cf = changed.find((c) => c.path === path);
@@ -23808,7 +24151,7 @@ async function ide_default(app2) {
     const fmt = q.format === "tar" ? "tar" : "zip";
     const child = spawn2("git", ["archive", `--format=${fmt}`, "--end-of-options", ref], { cwd: repoDir });
     reply.header("content-type", fmt === "zip" ? "application/zip" : "application/x-tar");
-    reply.header("content-disposition", `attachment; filename="${basename(repoDir)}-${ref.replace(/[^\w.-]/g, "_")}.${fmt}"`);
+    reply.header("content-disposition", `attachment; filename="${basename2(repoDir)}-${ref.replace(/[^\w.-]/g, "_")}.${fmt}"`);
     return reply.send(child.stdout);
   });
   app2.get("/projects/:id/commit/:sha", async (req, reply) => {
@@ -23960,22 +24303,22 @@ async function finishGraphOp(reply, id, repoDir, r, verb) {
     CODE_STYLE_CLAUSE,
     `${verb} via git graph project ${id}.`
   ].join("\n\n");
-  const s2 = createSession(id, r.worktree, { id: basename(r.worktree), model, effort, agent, prompt });
+  const s2 = createSession(id, r.worktree, { id: basename2(r.worktree), model, effort, agent, prompt });
   return { status: "conflict", sessionId: s2.id };
 }
 
 // src/routes/fs.ts
 import { readdir } from "node:fs/promises";
-import { homedir as homedir3 } from "node:os";
-import { resolve as resolve10, dirname as dirname9, join as join5 } from "node:path";
+import { homedir as homedir4 } from "node:os";
+import { resolve as resolve11, dirname as dirname10, join as join6 } from "node:path";
 async function fs_default(app2) {
   app2.get("/fs/browse", async (req, reply) => {
     const q = req.query.path;
-    const dir2 = q && q.trim() ? resolve10(q.trim()) : homedir3();
+    const dir2 = q && q.trim() ? resolve11(q.trim()) : homedir4();
     try {
       const ents = await readdir(dir2, { withFileTypes: true });
-      const entries = ents.filter((e) => e.isDirectory() && !e.name.startsWith(".")).map((e) => ({ name: e.name, path: join5(dir2, e.name) })).sort((a, b) => a.name.localeCompare(b.name));
-      const parent = dirname9(dir2);
+      const entries = ents.filter((e) => e.isDirectory() && !e.name.startsWith(".")).map((e) => ({ name: e.name, path: join6(dir2, e.name) })).sort((a, b) => a.name.localeCompare(b.name));
+      const parent = dirname10(dir2);
       return { path: dir2, parent: parent === dir2 ? null : parent, entries };
     } catch {
       return reply.code(400).send({ error: `tak bisa membaca folder "${dir2}"` });
@@ -23988,13 +24331,14 @@ init_db();
 init_src();
 init_src2();
 init_session_phases();
-import { existsSync as existsSync7 } from "node:fs";
+import { existsSync as existsSync8 } from "node:fs";
 init_settings2();
 init_codex_trust();
 
 // src/services/session-launch.ts
 init_db();
 init_src2();
+init_src();
 init_settings2();
 init_codex_trust();
 init_pty();
@@ -24051,6 +24395,8 @@ async function startSpecSession(spec, opts) {
   };
   const goal = isGoalFlow || (opts.goal ?? setting.goal.enabled) ? resolveGoalCondition(goalArgs, opts.goalCondition, isGoalFlow ? null : setting.goal.condition) : void 0;
   const verifyScope = opts.verifyScope ?? setting.verifyScope;
+  const recordedMethod = readSpecMethod(spec.payload);
+  const method = resolveMethod(opts.method ?? recordedMethod ?? setting.method);
   if (agent === "codex") ensureCodexTrust(repoDir);
   let baseSha;
   if (resume?.worktreeKept) {
@@ -24067,6 +24413,10 @@ async function startSpecSession(spec, opts) {
       data: { baseSha, headSha: null, startedAt: /* @__PURE__ */ new Date() }
     });
   }
+  if (!recordedMethod) {
+    const stamped = stampSpecMethod(spec.payload, method.id);
+    if (stamped) await prisma.spec.update({ where: { id: spec.id }, data: { payload: stamped } });
+  }
   const brief = {
     id: spec.id,
     title: spec.title,
@@ -24081,14 +24431,15 @@ async function startSpecSession(spec, opts) {
     prompt = startGoalPrompt(brief, branchTo, {
       autonomy: opts.autonomy,
       verifyScope,
-      resume: resumeCtx
+      resume: resumeCtx,
+      method: method.id
     });
   } else if (isContinue) {
-    prompt = continuePrompt(opts.flow, brief, branchTo, opts.autonomy, verifyScope);
+    prompt = continuePrompt(opts.flow, brief, branchTo, opts.autonomy, verifyScope, method.id);
   } else if (resumeCtx) {
-    prompt = resumePrompt(opts.flow, brief, branchTo, resumeCtx, opts.autonomy, verifyScope);
+    prompt = resumePrompt(opts.flow, brief, branchTo, resumeCtx, opts.autonomy, verifyScope, method.id);
   } else {
-    prompt = startPrompt(opts.flow, brief, branchTo, opts.autonomy, verifyScope);
+    prompt = startPrompt(opts.flow, brief, branchTo, opts.autonomy, verifyScope, method.id);
   }
   const scopeEnv = { HANOMAN_BASE_SHA: baseSha, HANOMAN_VERIFY_SCOPE: verifyScope };
   const s2 = createSession(spec.projectId, worktree, {
@@ -24106,12 +24457,30 @@ async function startSpecSession(spec, opts) {
   return resume ? { id: s2.id, resumed: true } : { id: s2.id };
 }
 
+// src/services/method-status.ts
+init_src();
+init_src2();
+init_pty();
+function methodStatusReport(env = process.env) {
+  const scans = zAgent.options.map((a) => scanAgentSkills(a, env));
+  return {
+    agents: scans.map((s2) => ({ agent: s2.agent, home: s2.home, roots: s2.roots, skills: s2.skills.length })),
+    methods: scans.flatMap((s2) => {
+      const installed = { skills: s2.skills.map((k) => k.id), packages: s2.packages };
+      return METHOD_IDS.map((id) => methodStatus(METHODS[id], s2.agent, installed));
+    })
+  };
+}
+function installCommand(m, agent, shell = shellBin()) {
+  return [shell, "-lc", `${m.install[agent].join(" && ")}; exec '${shell}' -l`];
+}
+
 // src/services/session-worktree.ts
-import { resolve as resolve11, sep as sep3 } from "node:path";
+import { resolve as resolve12, sep as sep3 } from "node:path";
 function ownsWorktree(repoDir, cwd) {
-  const base2 = resolve11(repoDir);
-  const dir2 = resolve11(cwd);
-  const container = resolve11(base2, ".worktrees");
+  const base2 = resolve12(repoDir);
+  const dir2 = resolve12(cwd);
+  const container = resolve12(base2, ".worktrees");
   return dir2 !== base2 && dir2 !== container && dir2.startsWith(container + sep3);
 }
 
@@ -24196,6 +24565,8 @@ async function terminal_default(app2) {
           // SPEC-338 · ADR-0074
           verifyScope: parsed.data.verifyScope,
           // SPEC-376 · ADR-0080
+          method: parsed.data.method,
+          // SPEC-734 · ADR-0113
           force: parsed.data.force
           // SPEC-447 · ADR-0093
         });
@@ -24214,6 +24585,13 @@ async function terminal_default(app2) {
     if ("shell" in parsed.data) {
       const repoDir2 = await resolveRepoDir(project.id);
       if (!repoDir2) return reply.code(400).send({ error: `project "${project.id}" belum di-bind ke checkout lokal`, needsBind: true });
+      const inst = parsed.data.install;
+      if (inst) {
+        const m = METHODS[inst.method];
+        if (!m) return reply.code(400).send({ error: `metode "${inst.method}" tak dikenal` });
+        const s4 = createSession(project.id, repoDir2, { command: installCommand(m, inst.agent) });
+        return reply.code(201).send({ id: s4.id });
+      }
       const s3 = createSession(project.id, repoDir2, { command: [shellBin()] });
       return reply.code(201).send({ id: s3.id });
     }
@@ -24382,7 +24760,7 @@ async function terminal_default(app2) {
     if (!s2) return { ok: false, code: 404, msg: "not found" };
     const repoDir = await resolveRepoDir(s2.projectId);
     if (!repoDir) return { ok: false, code: 409, msg: "project belum punya repoDir" };
-    if (!s2.cwd.includes("/.worktrees/") || !existsSync7(s2.cwd))
+    if (!s2.cwd.includes("/.worktrees/") || !existsSync8(s2.cwd))
       return { ok: false, code: 409, msg: "belum ada worktree untuk di-review \u2014 jalankan/lanjutkan sesi dulu" };
     return { ok: true, id: s2.id, repoDir };
   };
@@ -24474,8 +24852,8 @@ async function terminal_default(app2) {
 // src/routes/vps.ts
 init_db();
 init_src();
-import { readFileSync as readFileSync9, existsSync as existsSync10 } from "node:fs";
-import { homedir as homedir5 } from "node:os";
+import { readFileSync as readFileSync10, existsSync as existsSync11 } from "node:fs";
+import { homedir as homedir6 } from "node:os";
 
 // src/vps/catalog/catalog.data.ts
 var RAW_SECTIONS = [{ "id": "ssh", "title": "SSH Hardening", "icon": "\u{1F511}", "count": 14 }, { "id": "firewall", "title": "Firewall & Network", "icon": "\u{1F525}", "count": 14 }, { "id": "aapanel", "title": "aaPanel Security", "icon": "\u{1F5A5}\uFE0F", "count": 14 }, { "id": "user", "title": "User & Permission Management", "icon": "\u{1F464}", "count": 14 }, { "id": "system", "title": "System Hardening (OS Level)", "icon": "\u2699\uFE0F", "count": 16 }, { "id": "webserver", "title": "Web Server Hardening", "icon": "\u{1F310}", "count": 14 }, { "id": "database", "title": "Database Security", "icon": "\u{1F5C4}\uFE0F", "count": 15 }, { "id": "ssl", "title": "SSL/TLS & Enkripsi", "icon": "\u{1F512}", "count": 13 }, { "id": "ids", "title": "Intrusion Detection & Prevention", "icon": "\u{1F6A8}", "count": 9 }, { "id": "logging", "title": "Logging & Monitoring", "icon": "\u{1F4CA}", "count": 13 }, { "id": "backup", "title": "Backup & Disaster Recovery", "icon": "\u{1F4BE}", "count": 12 }, { "id": "ddos", "title": "DDoS Protection", "icon": "\u{1F30A}", "count": 11 }, { "id": "kernel", "title": "Kernel Hardening", "icon": "\u{1F9E0}", "count": 12 }, { "id": "malware", "title": "File Integrity & Malware Detection", "icon": "\u{1F9A0}", "count": 7 }, { "id": "enterprise", "title": "Advanced Enterprise & Government Level", "icon": "\u{1F3E2}", "count": 31 }, { "id": "checklist", "title": "Checklist Rutin", "icon": "\u2705", "count": 23 }];
@@ -24557,14 +24935,14 @@ var _map = new Map(CATALOG.map((c) => [c.id, c]));
 var byId = (id) => _map.get(id);
 
 // src/services/vps-remediate.ts
-import { readFileSync as readFileSync7 } from "node:fs";
+import { readFileSync as readFileSync8 } from "node:fs";
 
 // src/services/vps-ssh.ts
 init_config2();
 import { spawn as spawn3 } from "node:child_process";
 import { mkdtempSync, rmSync as rmSync4, writeFileSync as writeFileSync4 } from "node:fs";
 import { tmpdir as tmpdir3 } from "node:os";
-import { dirname as dirname10, join as join6 } from "node:path";
+import { dirname as dirname11, join as join7 } from "node:path";
 var sshBin = () => effectiveStr("HANOMAN_SSH_BIN") ?? "ssh";
 function consoleArgv(t) {
   return [
@@ -24579,8 +24957,8 @@ function consoleArgv(t) {
   ];
 }
 function askpassScript() {
-  const dir2 = mkdtempSync(join6(tmpdir3(), "hanoman-askpass-"));
-  const path = join6(dir2, "askpass.sh");
+  const dir2 = mkdtempSync(join7(tmpdir3(), "hanoman-askpass-"));
+  const path = join7(dir2, "askpass.sh");
   writeFileSync4(path, `#!/bin/sh
 printf '%s' "$HANOMAN_SSH_PASSWORD"
 `, { mode: 448 });
@@ -24614,14 +24992,14 @@ function sshExec(t, remoteCmd, opts = {}) {
     SSH_ASKPASS_REQUIRE: "force",
     HANOMAN_SSH_PASSWORD: opts.password
   } : process.env;
-  return new Promise((resolve15) => {
+  return new Promise((resolve16) => {
     const p = spawn3(sshBin(), args, { stdio: ["pipe", "pipe", "pipe"], env });
     let out3 = "";
     const timer7 = setTimeout(() => p.kill("SIGKILL"), opts.timeoutMs ?? 6e4);
     const done = (r) => {
       clearTimeout(timer7);
-      if (askpass) rmSync4(dirname10(askpass), { recursive: true, force: true });
-      resolve15(r);
+      if (askpass) rmSync4(dirname11(askpass), { recursive: true, force: true });
+      resolve16(r);
     };
     p.stdout.on("data", (d) => {
       out3 += d;
@@ -24640,17 +25018,17 @@ function sshExec(t, remoteCmd, opts = {}) {
 
 // src/services/vps-audit.ts
 init_db();
-import { readFileSync as readFileSync6 } from "node:fs";
-import { join as join8 } from "node:path";
+import { readFileSync as readFileSync7 } from "node:fs";
+import { join as join9 } from "node:path";
 
 // src/runner/deps.ts
-import { existsSync as existsSync8 } from "node:fs";
-import { dirname as dirname11, join as join7 } from "node:path";
+import { existsSync as existsSync9 } from "node:fs";
+import { dirname as dirname12, join as join8 } from "node:path";
 function repoRootFrom(startDir) {
   let dir2 = startDir;
   for (let i = 0; i < 8; i++) {
-    if (existsSync8(join7(dir2, "pnpm-workspace.yaml"))) return dir2;
-    const parent = dirname11(dir2);
+    if (existsSync9(join8(dir2, "pnpm-workspace.yaml"))) return dir2;
+    const parent = dirname12(dir2);
     if (parent === dir2) break;
     dir2 = parent;
   }
@@ -24754,7 +25132,7 @@ function parseHealth(out3) {
   return { uptime: h.uptime ?? "", disk: h.disk ?? "", mem: h.mem ?? "", load: h.load ?? "" };
 }
 var target = (v) => ({ host: v.host, port: v.port, user: v.user, keyPath: v.keyPath });
-var scriptPath = (f) => join8(repoRoot(), "server", "scripts", "vps", f);
+var scriptPath = (f) => join9(repoRoot(), "server", "scripts", "vps", f);
 async function itemStatesOf(vpsId) {
   const rows = await prisma.vpsItemState.findMany({ where: { vpsId } });
   return Object.fromEntries(rows.map((s2) => [s2.itemId, { na: s2.na, attested: s2.attested }]));
@@ -24763,7 +25141,7 @@ async function runAudit(v) {
   const r = await sshExec(
     target(v),
     "sudo -n bash -s",
-    { stdin: readFileSync6(scriptPath("audit.sh"), "utf8"), timeoutMs: 6e4 }
+    { stdin: readFileSync7(scriptPath("audit.sh"), "utf8"), timeoutMs: 6e4 }
   );
   const audit = parseAudit(r.out);
   if (r.code !== 0 || audit.length === 0) return { ok: false, out: r.out };
@@ -24822,7 +25200,7 @@ async function remediate(v, items, dryRun) {
   const r = await sshExec(
     v,
     `sudo -n env ITEMS=${items.join(",")} SSH_PORT=${v.port} DRY_RUN=${dryRun ? "1" : ""} bash -s`,
-    { stdin: readFileSync7(scriptPath("remediate.sh"), "utf8"), timeoutMs: 3e5 }
+    { stdin: readFileSync8(scriptPath("remediate.sh"), "utf8"), timeoutMs: 3e5 }
   );
   return { ok: r.code === 0, steps: parseSteps(r.out), out: r.out };
 }
@@ -24901,15 +25279,15 @@ async function buildChecklist(vpsId) {
 // src/services/vps-key.ts
 init_config2();
 import { execFileSync as execFileSync2 } from "node:child_process";
-import { existsSync as existsSync9, mkdirSync as mkdirSync8, readFileSync as readFileSync8 } from "node:fs";
-import { homedir as homedir4 } from "node:os";
-import { join as join9 } from "node:path";
-var keyDir = () => effectiveStr("HANOMAN_SSH_KEY_DIR") ?? join9(homedir4(), ".hanoman");
+import { existsSync as existsSync10, mkdirSync as mkdirSync8, readFileSync as readFileSync9 } from "node:fs";
+import { homedir as homedir5 } from "node:os";
+import { join as join10 } from "node:path";
+var keyDir = () => effectiveStr("HANOMAN_SSH_KEY_DIR") ?? join10(homedir5(), ".hanoman");
 function ensureHanomanKey() {
   const dir2 = keyDir();
-  const privPath = join9(dir2, "id_ed25519");
+  const privPath = join10(dir2, "id_ed25519");
   const pubPath = `${privPath}.pub`;
-  if (!existsSync9(privPath)) {
+  if (!existsSync10(privPath)) {
     mkdirSync8(dir2, { recursive: true, mode: 448 });
     execFileSync2(
       "ssh-keygen",
@@ -24917,7 +25295,7 @@ function ensureHanomanKey() {
       { stdio: ["ignore", "ignore", "pipe"] }
     );
   }
-  return { privPath, pubPath, pub: readFileSync8(pubPath, "utf8").trim() };
+  return { privPath, pubPath, pub: readFileSync9(pubPath, "utf8").trim() };
 }
 
 // src/services/vps-bootstrap.ts
@@ -24936,7 +25314,7 @@ async function bootstrapKey(t, password) {
 init_pty();
 init_settings2();
 function keyMissing(v) {
-  return !!v.keyPath && !existsSync10(v.keyPath);
+  return !!v.keyPath && !existsSync11(v.keyPath);
 }
 async function vps_default(app2) {
   app2.get("/vps", async () => prisma.vps.findMany({ orderBy: { createdAt: "asc" } }));
@@ -25094,7 +25472,7 @@ async function vps_default(app2) {
     const r = await sshExec(
       v,
       `sudo -n env SSH_PORT=${v.port} SSH_USER=${v.user} bash -s`,
-      { stdin: readFileSync9(scriptPath("harden.sh"), "utf8"), timeoutMs: 3e5 }
+      { stdin: readFileSync10(scriptPath("harden.sh"), "utf8"), timeoutMs: 3e5 }
     );
     if (r.code !== 0) return reply.code(502).send({ error: "harden gagal lewat ssh", transcript: r.out });
     const verify = await sshExec(v, "true", { timeoutMs: 3e4 });
@@ -25119,7 +25497,7 @@ async function vps_default(app2) {
     const v = await prisma.vps.findUnique({ where: { id: req.params.id } });
     if (!v) return reply.code(404).send({ error: "not found" });
     if (keyMissing(v)) return reply.code(409).send({ error: "key VPS tidak ada di mesin ini", keyMissing: true });
-    const s2 = createSession(`vps-console:${v.id}`, homedir5(), { id: `vpsc-${v.id}`, command: consoleArgv(v) });
+    const s2 = createSession(`vps-console:${v.id}`, homedir6(), { id: `vpsc-${v.id}`, command: consoleArgv(v) });
     return reply.code(201).send({ id: s2.id });
   });
   app2.post("/vps/:id/session", async (req, reply) => {
@@ -25128,7 +25506,7 @@ async function vps_default(app2) {
     if (keyMissing(v)) return reply.code(409).send({ error: "key VPS tidak ada di mesin ini", keyMissing: true });
     const checks = v.audit ?? [];
     const { model, effort } = await sessionModel();
-    const s2 = createSession(`vps:${v.id}`, homedir5(), {
+    const s2 = createSession(`vps:${v.id}`, homedir6(), {
       model,
       effort,
       prompt: [
@@ -25146,9 +25524,9 @@ async function vps_default(app2) {
 // src/services/limits.ts
 init_config2();
 import { execFileSync as execFileSync3 } from "node:child_process";
-import { readFileSync as readFileSync10 } from "node:fs";
-import { homedir as homedir6 } from "node:os";
-import { join as join10 } from "node:path";
+import { readFileSync as readFileSync11 } from "node:fs";
+import { homedir as homedir7 } from "node:os";
+import { join as join11 } from "node:path";
 var USAGE_URL = "https://api.anthropic.com/api/oauth/usage";
 var TTL_MS2 = 3e4;
 var lastOk = null;
@@ -25161,7 +25539,7 @@ var LABELS = {
 var humanize = (k) => k.replace(/_/g, " ").replace(/\b\w/g, (c) => c.toUpperCase());
 var nowIso = () => (/* @__PURE__ */ new Date()).toISOString();
 function credsFile() {
-  return join10(effectiveStr("CLAUDE_CONFIG_DIR") ?? join10(homedir6(), ".claude"), ".credentials.json");
+  return join11(effectiveStr("CLAUDE_CONFIG_DIR") ?? join11(homedir7(), ".claude"), ".credentials.json");
 }
 function readAccessToken() {
   if (process.platform === "darwin" && !effectiveStr("CLAUDE_CONFIG_DIR")) {
@@ -25177,7 +25555,7 @@ function readAccessToken() {
     }
   }
   try {
-    return JSON.parse(readFileSync10(credsFile(), "utf8"))?.claudeAiOauth?.accessToken ?? null;
+    return JSON.parse(readFileSync11(credsFile(), "utf8"))?.claudeAiOauth?.accessToken ?? null;
   } catch {
     return null;
   }
@@ -25234,15 +25612,15 @@ async function getLimits() {
 
 // src/services/codex-limits.ts
 import { open as open2, readdir as readdir2, stat } from "node:fs/promises";
-import { homedir as homedir7 } from "node:os";
-import { join as join11 } from "node:path";
+import { homedir as homedir8 } from "node:os";
+import { join as join12 } from "node:path";
 var TTL_MS3 = 3e4;
 var STALE_AFTER_MS = 12 * 36e5;
 var TAIL_BYTES = 512 * 1024;
 var MAX_FILES = 8;
 var cache2 = null;
 var freshUntil2 = 0;
-var codexSessionsDir = () => join11(process.env.CODEX_HOME ?? join11(homedir7(), ".codex"), "sessions");
+var codexSessionsDir = () => join12(process.env.CODEX_HOME ?? join12(homedir8(), ".codex"), "sessions");
 var UNAVAILABLE = { status: "unavailable", windows: [], fetchedAt: null, plan: null };
 function windowLabel(minutes) {
   if (minutes === 300) return "Sesi 5 jam";
@@ -25275,7 +25653,7 @@ async function recentRollouts(dir2) {
     return [];
   }
   const stamped = await Promise.all(entries.map(async (rel) => {
-    const full = join11(dir2, rel);
+    const full = join12(dir2, rel);
     try {
       return { full, mtime: (await stat(full)).mtimeMs };
     } catch {
@@ -25391,14 +25769,19 @@ async function codex(app2) {
   app2.get("/codex/version", async () => codexVersionInfo());
 }
 
+// src/routes/methods.ts
+async function methods(app2) {
+  app2.get("/methods/status", async () => methodStatusReport());
+}
+
 // src/routes/update.ts
 init_src();
 
 // src/services/update.ts
 init_src();
 init_config2();
-import { readFileSync as readFileSync11 } from "node:fs";
-import { resolve as resolve12, dirname as dirname12 } from "node:path";
+import { readFileSync as readFileSync12 } from "node:fs";
+import { resolve as resolve13, dirname as dirname13 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 var UPDATE_COMMAND = "npm i -g hanoman@latest";
 function composeUpdate(x) {
@@ -25423,10 +25806,10 @@ var lastFetchAt = 0;
 var lastLatest = null;
 var lastStatus = "unavailable";
 function runningVersion() {
-  const here = dirname12(fileURLToPath3(import.meta.url));
-  for (const p of [resolve12(here, "build-info.json"), resolve12(here, "../package.json")]) {
+  const here = dirname13(fileURLToPath3(import.meta.url));
+  for (const p of [resolve13(here, "build-info.json"), resolve13(here, "../package.json")]) {
     try {
-      const v = JSON.parse(readFileSync11(p, "utf8")).version;
+      const v = JSON.parse(readFileSync12(p, "utf8")).version;
       if (typeof v === "string" && v) return v;
     } catch {
     }
@@ -25774,7 +26157,7 @@ init_conflicts();
 init_config2();
 import { randomUUID as randomUUID3 } from "node:crypto";
 import { mkdir as mkdir2, writeFile as writeFile2, readFile as readFile4, unlink } from "node:fs/promises";
-import { join as join12, resolve as resolve13 } from "node:path";
+import { join as join13, resolve as resolve14 } from "node:path";
 var EXT = {
   "image/png": ".png",
   "image/jpeg": ".jpg",
@@ -25784,22 +26167,22 @@ function extFor(mimeType) {
   return EXT[mimeType] ?? ".bin";
 }
 function uploadDir() {
-  return resolve13(effectiveStr("HANOMAN_UPLOAD_DIR") ?? join12(process.cwd(), "data", "uploads"));
+  return resolve14(effectiveStr("HANOMAN_UPLOAD_DIR") ?? join13(process.cwd(), "data", "uploads"));
 }
 async function saveUpload(buf, mimeType) {
   const dir2 = uploadDir();
   await mkdir2(dir2, { recursive: true });
   const storageKey = `${randomUUID3()}${extFor(mimeType)}`;
-  await writeFile2(join12(dir2, storageKey), buf);
+  await writeFile2(join13(dir2, storageKey), buf);
   return { storageKey, size: buf.length };
 }
 async function readUpload(storageKey) {
   const safe = storageKey.replace(/[/\\]/g, "");
-  return readFile4(join12(uploadDir(), safe));
+  return readFile4(join13(uploadDir(), safe));
 }
 async function readUploadOrFetch(storageKey) {
   const safe = storageKey.replace(/[/\\]/g, "");
-  const target2 = join12(uploadDir(), safe);
+  const target2 = join13(uploadDir(), safe);
   try {
     return await readFile4(target2);
   } catch {
@@ -25818,7 +26201,7 @@ async function readUploadOrFetch(storageKey) {
 }
 async function deleteUpload(storageKey) {
   const safe = storageKey.replace(/[/\\]/g, "");
-  await unlink(join12(uploadDir(), safe)).catch(() => {
+  await unlink(join13(uploadDir(), safe)).catch(() => {
   });
 }
 
@@ -25949,10 +26332,10 @@ import { randomUUID as randomUUID5 } from "node:crypto";
 init_config2();
 import { randomUUID as randomUUID4 } from "node:crypto";
 import { mkdir as mkdir3, writeFile as writeFile3, readFile as readFile5, unlink as unlink2 } from "node:fs/promises";
-import { join as join13, resolve as resolve14, basename as basename2 } from "node:path";
+import { join as join14, resolve as resolve15, basename as basename3 } from "node:path";
 var MAX_TRANSCRIPT_BYTES = 1024 * 1024;
 function transcriptDir() {
-  return resolve14(effectiveStr("HANOMAN_TRANSCRIPT_DIR") ?? join13(process.cwd(), "data", "transcripts"));
+  return resolve15(effectiveStr("HANOMAN_TRANSCRIPT_DIR") ?? join14(process.cwd(), "data", "transcripts"));
 }
 function clamp(text) {
   const buf = Buffer.from(text, "utf8");
@@ -25970,20 +26353,20 @@ async function saveTranscript(text) {
   const dir2 = transcriptDir();
   await mkdir3(dir2, { recursive: true });
   const key = `${randomUUID4()}.log`;
-  await writeFile3(join13(dir2, key), body, "utf8");
+  await writeFile3(join14(dir2, key), body, "utf8");
   return { key, bytes: Buffer.byteLength(body, "utf8"), truncated };
 }
 async function readTranscript(key) {
   if (!key) return null;
   try {
-    return await readFile5(join13(transcriptDir(), basename2(key)), "utf8");
+    return await readFile5(join14(transcriptDir(), basename3(key)), "utf8");
   } catch {
     return null;
   }
 }
 async function deleteTranscript(key) {
   if (!key) return;
-  await unlink2(join13(transcriptDir(), basename2(key))).catch(() => {
+  await unlink2(join14(transcriptDir(), basename3(key))).catch(() => {
   });
 }
 
@@ -26406,7 +26789,7 @@ init_db();
 
 // src/services/ticket-accept.ts
 init_db();
-import { join as join14 } from "node:path";
+import { join as join15 } from "node:path";
 async function materializeAttachments(atts) {
   const ready = /* @__PURE__ */ new Set();
   for (const a of atts) {
@@ -26421,7 +26804,7 @@ async function materializeAttachments(atts) {
 var attachmentInstruction = (t, atts, ready) => {
   if (atts.length === 0) return "Tanpa lampiran.";
   const list2 = atts.map(
-    (a) => ready.has(a.id) ? `- ${a.filename} (${a.mimeType}) \u2192 ${join14(uploadDir(), a.storageKey)}` : `- ${a.filename} (${a.mimeType}) \u2192 BELUM TERUNDUH, ambil via GET /api/tickets/${t.id}/attachments/${a.id}`
+    (a) => ready.has(a.id) ? `- ${a.filename} (${a.mimeType}) \u2192 ${join15(uploadDir(), a.storageKey)}` : `- ${a.filename} (${a.mimeType}) \u2192 BELUM TERUNDUH, ambil via GET /api/tickets/${t.id}/attachments/${a.id}`
   ).join("\n");
   return `LAMPIRAN (${atts.length}) dari pelapor \u2014 biasanya screenshot yang menunjukkan masalah. PERIKSA setiap lampiran untuk memahami konteks keluhan sebelum bekerja; jangan berasumsi dari teks saja. Berkas ada di direktori upload server (baca langsung dengan tool Read):
 ${list2}
@@ -27112,7 +27495,7 @@ function leadPrompt(q, c) {
   lines2.push(`Anggarkan begini: pakai paling banyak separuh waktu untuk mengumpulkan bukti, lalu **berhenti membaca** dan tulis jawabannya dengan apa yang sudah kamu punya. Kalau buktinya jadi tipis karena itu, turunkan \`confidence\`-nya \u2014 jangan menambah waktu baca.`);
   lines2.push("");
   lines2.push("## Cara kerja");
-  lines2.push("1. KUMPULKAN BUKTI DULU sebelum memutuskan, DI DALAM anggaran waktu di atas: `internal/docs/**` (Source of Truth) dan index-nya, ADR yang relevan, plan `docs/superpowers/plans/**`, kode yang bersangkutan, dan riwayat git. Baca, jangan mengingat \u2014 tapi baca seperlunya, bukan sehabisnya.");
+  lines2.push(`1. KUMPULKAN BUKTI DULU sebelum memutuskan, DI DALAM anggaran waktu di atas: \`internal/docs/**\` (Source of Truth) dan index-nya, ADR yang relevan, plan ${PLAN_DIRS.map((d) => `\`${d}/**\``).join(" / ")}, kode yang bersangkutan, dan riwayat git. Baca, jangan mengingat \u2014 tapi baca seperlunya, bukan sehabisnya.`);
   lines2.push('2. Putuskan. Kalau setelah membaca kamu masih ragu, TETAP putuskan: pilih opsi yang PALING MUDAH DIBATALKAN, lalu tandai `confidence: "ragu"`. "Tidak tahu" bukan jawaban, dan meminta manusia memutuskan adalah persis keadaan yang kamu ada untuk menghapusnya. SATU pengecualian: bila jawabannya menuntut fakta konkret yang memang TIDAK ADA di repo maupun di konteks ini, isi `missing` dengan daftar pendek hal yang kurang \u2014 hal yang bisa disediakan seseorang, bukan keluhan \u2014 dan tetap tulis `decision` sebagai langkah paling aman sementara. `missing` yang terisi memaksa `confidence` jadi `ragu` dan memanggil operator; jangan memakainya untuk bukti yang cuma tipis.');
   lines2.push("3. Rujuk bukti yang BENAR-BENAR kamu baca. Rujukan berupa path berkas relatif terhadap checkout, nomor ADR (`ADR-0091`), atau sha commit. Rujukan yang tak ada di repo akan dibuang server dan membuat jawabanmu tampak tanpa dasar.");
   lines2.push("4. JANGAN membaca atau mengutip kredensial (isi `.env*`, token, kunci privat). Jejak keputusan disimpan di basis data; rahasia tak boleh mendarat di sana.");
@@ -27147,7 +27530,7 @@ function leadPrompt(q, c) {
 
 // src/services/lead/verdict.ts
 init_src();
-import { existsSync as existsSync11 } from "node:fs";
+import { existsSync as existsSync12 } from "node:fs";
 import { isAbsolute as isAbsolute3, resolve as resolvePath, relative } from "node:path";
 function extractJsonBlock(raw) {
   const re = /```json\s*\n([\s\S]*?)```/g;
@@ -27185,7 +27568,7 @@ function keepExistingRefs(refs2, repoDir) {
     const full = resolvePath(repoDir, ref);
     const rel = relative(repoDir, full);
     if (rel.startsWith("..")) continue;
-    if (existsSync11(full)) out3.push(ref);
+    if (existsSync12(full)) out3.push(ref);
   }
   return [...new Set(out3)];
 }
@@ -27371,7 +27754,7 @@ function leadFailureReason(agent, timeoutMs, err, stdout, stderr) {
 function think(prompt, o) {
   const bin = binFor(o.agent);
   const args = leadArgv({ agent: o.agent, model: o.model, effort: o.effort, prompt });
-  return new Promise((resolve15, reject2) => {
+  return new Promise((resolve16, reject2) => {
     const child = execFile9(bin, args, {
       cwd: o.cwd,
       timeout: o.timeoutMs,
@@ -27384,7 +27767,7 @@ function think(prompt, o) {
         reject2(new Error(leadFailureReason(o.agent, o.timeoutMs, err, stdout, stderr)));
         return;
       }
-      resolve15(stdout);
+      resolve16(stdout);
     });
     child.stdin?.end();
   });
@@ -27421,9 +27804,9 @@ function acquire(cap, waitMs) {
     return Promise.resolve();
   }
   const startedAt = Date.now();
-  return new Promise((resolve15, reject2) => {
+  return new Promise((resolve16, reject2) => {
     const w = {
-      grant: resolve15,
+      grant: resolve16,
       deny: reject2,
       timer: setTimeout(() => {
         const i = queue.indexOf(w);
@@ -28783,7 +29166,7 @@ init_db();
 init_db();
 import { execFile as execFile10 } from "node:child_process";
 import { promisify as promisify9 } from "node:util";
-import { existsSync as existsSync12 } from "node:fs";
+import { existsSync as existsSync13 } from "node:fs";
 
 // src/services/changelog/scrub.ts
 var MERGE = /^merge\s+(branch|pull request|remote-tracking branch|tag)\b/i;
@@ -28850,7 +29233,7 @@ var US2 = "";
 var RS = "";
 var NO_REPO = "project ini belum ditautkan ke repo di mesin ini";
 var NO_TAG = "repo project ini belum punya tag rilis";
-var usable = (repoDir) => !!repoDir && existsSync12(repoDir);
+var usable = (repoDir) => !!repoDir && existsSync13(repoDir);
 async function listTags(repoDir) {
   if (!usable(repoDir)) return { tags: [], head: null, reason: NO_REPO };
   try {
@@ -29111,13 +29494,13 @@ init_db();
 
 // src/services/agent-tool-catalog.ts
 init_src();
-import { readFileSync as readFileSync12 } from "node:fs";
-import { homedir as homedir8 } from "node:os";
-import { join as join15 } from "node:path";
-var home = () => process.env.HOME || homedir8();
-var readJson = (path) => {
+import { readFileSync as readFileSync13 } from "node:fs";
+import { homedir as homedir9 } from "node:os";
+import { join as join16 } from "node:path";
+var home = () => process.env.HOME || homedir9();
+var readJson2 = (path) => {
   try {
-    return JSON.parse(readFileSync12(path, "utf8"));
+    return JSON.parse(readFileSync13(path, "utf8"));
   } catch {
     return null;
   }
@@ -29130,7 +29513,7 @@ var serversOf = (node) => {
 var codexServers = () => {
   let text;
   try {
-    text = readFileSync12(join15(home(), ".codex", "config.toml"), "utf8");
+    text = readFileSync13(join16(home(), ".codex", "config.toml"), "utf8");
   } catch {
     return [];
   }
@@ -29143,12 +29526,12 @@ var codexServers = () => {
 };
 function mcpServerNames(repoDir) {
   const names = [];
-  const claudeJson = readJson(join15(home(), ".claude.json"));
+  const claudeJson = readJson2(join16(home(), ".claude.json"));
   names.push(...serversOf(claudeJson));
   if (repoDir) {
     const projects = claudeJson?.projects;
     if (projects && typeof projects === "object") names.push(...serversOf(projects[repoDir]));
-    names.push(...serversOf(readJson(join15(repoDir, ".mcp.json"))));
+    names.push(...serversOf(readJson2(join16(repoDir, ".mcp.json"))));
   }
   names.push(...codexServers());
   return [...new Set(names.filter(Boolean))].sort((a, b) => a.localeCompare(b));
@@ -29487,7 +29870,7 @@ function issuesFromRest(raw) {
 }
 var GH_FIELDS = "number,title,body,author,labels,url,state,createdAt,updatedAt";
 var API2 = "https://api.github.com";
-var defaultRunGh = (args, env) => new Promise((resolve15, reject2) => {
+var defaultRunGh = (args, env) => new Promise((resolve16, reject2) => {
   execFile11(
     args[0],
     args.slice(1),
@@ -29495,7 +29878,7 @@ var defaultRunGh = (args, env) => new Promise((resolve15, reject2) => {
     (err, stdout, stderr) => {
       const e = err;
       if (e && (e.code === "ENOENT" || e.code === "EACCES")) return reject2(e);
-      resolve15({ code: err ? Number(err.code ?? 1) : 0, stdout, stderr });
+      resolve16({ code: err ? Number(err.code ?? 1) : 0, stdout, stderr });
     }
   );
 });
@@ -31034,7 +31417,7 @@ var PUBLIC = /* @__PURE__ */ new Set([
   "GET /api/agent-integration.md"
 ]);
 function buildApp({ requireAuth = true, agentDocFile } = {}) {
-  const docFile = agentDocFile !== void 0 ? agentDocFile : pickGuideFile(dirname13(fileURLToPath4(import.meta.url)), process.env, existsSync13);
+  const docFile = agentDocFile !== void 0 ? agentDocFile : pickGuideFile(dirname14(fileURLToPath4(import.meta.url)), process.env, existsSync14);
   const app2 = Fastify({ logger: false, trustProxy: true });
   app2.addContentTypeParser("application/json", { parseAs: "string" }, (_req, body, done) => {
     if (!body) return done(null, void 0);
@@ -31114,6 +31497,7 @@ function buildApp({ requireAuth = true, agentDocFile } = {}) {
     await api.register(tickets_default);
     await api.register(scheduler_default);
     await api.register(codex);
+    await api.register(methods);
     await api.register(lead_default);
     await api.register(custom_agents_default);
     await api.register(githubIssues);
@@ -31124,7 +31508,7 @@ function buildApp({ requireAuth = true, agentDocFile } = {}) {
     await api.register(client_accounts_default);
   }, { prefix: "/api" });
   if (process.env.NODE_ENV === "production") {
-    const dist = pickWebDir(dirname13(fileURLToPath4(import.meta.url)), process.env, existsSync13);
+    const dist = pickWebDir(dirname14(fileURLToPath4(import.meta.url)), process.env, existsSync14);
     if (dist) {
       app2.register(fastifyStatic, { root: dist });
       app2.setNotFoundHandler((req, reply) => req.url.startsWith("/api") ? reply.code(404).send({ error: "not found" }) : reply.sendFile("index.html"));